high7.5
CVE-2021-43091
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
Impact
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yeswiki | Yeswiki | Version 4.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/yeswiki/yeswiki/commit/c9785f9a92744c3475f9676a0d8f95de24750094
- https://huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0/
- https://github.com/yeswiki/yeswiki/commit/c9785f9a92744c3475f9676a0d8f95de24750094
- https://huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0/