CVE-2021-43969

2022-03-0720:58:08

mitre

www.cve.org

quicklert

digium

sql injection

out-of-band interaction

dns

time-based

database disclosure

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

32.8%

JSON

The login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL Injection with Out-of-Band Interaction (DNS) and Blind Time-Based SQL Injections. Exploitation can be used to disclose all data within the database (up to and including the administrative accounts’ login IDs and passwords) via the login.jsp uname parameter.