CVE-2021-26795

November 17, 2021

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.

Summary:

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.

Reference Links(if available):

  • http://seclists.org/fulldisclosure/2021/Nov/37
  • http://packetstormsecurity.com/files/164961/Talariax-sendQuick-Alertplus-Server-Admin-4.3-SQL-Injection.html

  • CVSS Score (if available)

    v2: / LOW

    v3: /

    Links to Exploits(if available)

  • You may have missed

    news

    Microsoft Addresses Four Critical Zero-Days in November Patch Tuesday Updates

    November 14, 2024
    news

    AI Threat Worsening in 2025: Insights from Google Cloud

    November 14, 2024
    news

    Lazarus Group’s Code Smuggling Technique Exploits Extended Attributes in macOS

    November 14, 2024
    news

    Ethical Hacker or Not? Amazon MOVEit Leaker’s Controversial Claims

    November 14, 2024
    news

    Hive0145 Targets Europe with Sophisticated Strela Stealer Campaigns

    November 14, 2024