Vulnerability CVE-2021-43329
Published: 2022-08-25   Modified: 2022-08-26

Description:
A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbitrary SQL commands via the license parameter.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Mumara Classic 2.93 SQL Injection
Shain Lakin
14.11.2021

Type:

CWE-89

 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://vulners.com/zdt/1337DAY-ID-37036
https://www.mumara.com/classic/
https://packetstormsecurity.com/files/164947/Mumara-Classic-2.93-SQL-Injection.html
https://www.exploit-db.com/exploits/50518
https://www.gen.net.uk/about-us/news/50-exploit-db/18335-webapps-mumara-classic-293-license-sql-injection-unauthenticated
https://www.cyberdetails.org/2021/11/mumara-classic-293-sql-injection.html
https://packetstormsecurity.com/files/164947/mumaraclassic293-sql.txt
Copyright 2024, cxsecurity.com

 

Back to Top