Lucene search

K
cveMitreCVE-2021-36520
HistoryApr 16, 2023 - 4:15 a.m.

CVE-2021-36520

2023-04-1604:15:08
CWE-89
mitre
web.nvd.nist.gov
234
2
cve-2021-36520
sql injection
i-tech trainsmart
security vulnerability
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.004

Percentile

73.6%

A SQL injection vulnerability in I-Tech Trainsmart r1044 exists via a evaluation/assign-evaluation?id= URI.

Affected configurations

Nvd
Node
washingtoni-tech_trainsmartMatchr1044
VendorProductVersionCPE
washingtoni-tech_trainsmartr1044cpe:2.3:a:washington:i-tech_trainsmart:r1044:*:*:*:*:*:*:*

Social References

More

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.004

Percentile

73.6%