Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-26201

EPSS 0.15% · P36
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-26201

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
CASAP Automated Enrollment SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CASAP Automated Enrollment是美国CASAP组织的一个自动注册系统。该项目的目的是为CASAP提供一个自动化的注册系统,以简化学校的流程,并使其更加有效,高效且易于检索。 CASAP Automated Enrollment System中存在SQL注入漏洞,该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-26201

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-26201

登录查看更多情报信息。

Same Patch Batch · n/a · 2021-02-15 · 28 CVEs total

CVE-2021-233377.2 HIGHCommand Injection
CVE-2021-233386.6 MEDIUMDeserialization of Untrusted Data
CVE-2021-233365.9 MEDIUMWeb Cache Poisoning
CVE-2020-285005.3 MEDIUMRegular Expression Denial of Service (ReDoS)
CVE-2020-22427Nagios XI 代码注入漏洞
CVE-2021-26822Teachers Record Management System SQL注入漏洞
CVE-2020-35734Batflat 注入漏洞
CVE-2021-26200SourceCodester user area for Library System SQL注入漏洞
CVE-2021-3239Sourcecodester Pisay Online E-Learning System SQL注入漏洞
CVE-2020-29143OpenEMR SQL注入漏洞
CVE-2020-29139OpenEMR SQL注入漏洞
CVE-2020-29140OpenEMR SQL注入漏洞
CVE-2020-29142OpenEMR SQL注入漏洞
CVE-2020-28337Microweber 路径遍历漏洞
CVE-2021-27211Steghide 安全漏洞
CVE-2021-27201Endian Firewall Community 操作系统命令注入漏洞
CVE-2021-3375Atomi ActivePresenter 缓冲区错误漏洞
CVE-2020-24899Nagios XI和Nagios 命令注入漏洞
CVE-2021-25296Nagios XI 安全漏洞
CVE-2020-22425Centreon SQL注入漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-26201

No comments yet


Leave a comment