by Kastro
Paper/Archive/CVE-2021-27828

CVE-2021-27828

mitre — SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's cont…

EPSS 20%CVSS 9.1
critical.is priorityof 100
47
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 97.5.975 × 2019.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

refin4velocity.com/in4suite-erp.htmlrefexploit-db.com/exploits/49884