critical9.8
CVE-2021-22851
HGiga EIP product contains SQL Injection vulnerability.
Impact
HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Oaklouds Openid | from 2.0 before 2.0-54 from 3.0 before 3.0-54 |