CVE-2021-45821
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-45821
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Xbtit SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Xbtit是一个开源的跟踪器软件。 Xbtit 3.1 存在SQL注入漏洞，该漏洞源于ajaxchat/getHistoryChatData.php 文件中的 sid 参数缺少对于SQL语句的过滤转义。攻击者可以发送特殊请求利用该漏洞获取用户名和密码等敏感数据，某些情况下可以在远程 Web 服务器上执行远程代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2021-45821
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-45821
请登录查看更多情报信息。
Other References for CVE-2021-45821 (3)
- https://emaragkos.gr/infosec-adventures/xbtit-3-1-sql-njection/x_refsource_MISC
- https://github.com/btiteam/xbtit-3.1/issues/6x_refsource_MISC
Same Patch Batch · n/a · 2022-03-16 · 80 CVEs total
| CVE-2022-23812 | 9.8 CRITICAL | Malicious Package |
| CVE-2021-23648 | 5.4 MEDIUM | Cross-site Scripting (XSS) |
| CVE-2022-21164 | 3.7 LOW | Denial of Service (DoS) |
| CVE-2021-39695 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39707 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39689 | Google Android 数据伪造问题漏洞 | |
| CVE-2021-39667 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39624 | Google Android 资源管理错误漏洞 | |
| CVE-2021-0957 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39793 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39685 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39693 | Google Android 缓冲区错误漏洞 | |
| CVE-2021-39694 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39690 | Google Android 输入验证错误漏洞 | |
| CVE-2021-39697 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39698 | Google Android 资源管理错误漏洞 | |
| CVE-2021-39701 | Google Android 输入验证错误漏洞 | |
| CVE-2021-39702 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39703 | Google Android 权限许可和访问控制问题漏洞 | |
| CVE-2021-39704 | Google Android 权限许可和访问控制问题漏洞 |
Showing top 20 of 80 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
V. Comments for CVE-2021-45821
No comments yet