CVE-2021-26795

November 17, 2021

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.

Summary:

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.

Reference Links(if available):

  • http://seclists.org/fulldisclosure/2021/Nov/37
  • http://packetstormsecurity.com/files/164961/Talariax-sendQuick-Alertplus-Server-Admin-4.3-SQL-Injection.html

  • CVSS Score (if available)

    v2: / LOW

    v3: /

    Links to Exploits(if available)

  • You may have missed

    news

    Advanced Email Attacks Target Manufacturing Sector: Rise of Phishing and BEC

    November 23, 2024
    news

    Ransomware Groups Driving 40% of Cyber-Attacks in 2024: Key Insights

    November 23, 2024
    news

    MITRE Reveals Top 25 Most Critical Software Flaws of 2024

    November 23, 2024
    news

    Microsoft Disrupts Phishing Operations by Seizing 240 Fraudulent Websites

    November 23, 2024
    news

    Black Friday Spam Emails: 77% Identified as Scams in 2024

    November 23, 2024