high8.8
CVE-2021-26795
A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive in…
Impact
A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Talariax | Sendquick Alert Plus Server Admin | before 4.3 Version 4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164961/Talariax-sendQuick-Alertplus-Server-Admin-4.3-SQL-Injection.html
- http://seclists.org/fulldisclosure/2021/Nov/37
- http://packetstormsecurity.com/files/164961/Talariax-sendQuick-Alertplus-Server-Admin-4.3-SQL-Injection.html
- http://seclists.org/fulldisclosure/2021/Nov/37