critical9.1Public exploit code
CVE-2021-27828
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by usi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection2021-05-19 · webapps · multiple
Impact
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| In4velocity | In4suite Erp | Version 3.2.74.1370 |