high8.8
CVE-2021-22852
HGiga EIP product contains SQL Injection vulnerability.
Impact
HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Oaklouds Openid | from 2.0 before 2.0-54 from 3.0 before 3.0-54 |