2024-05-25 21:48:12 +02:00
|
|
|
### [CVE-2021-43091](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43091)
|
|
|
|
|

|
2025-09-29 21:09:30 +02:00
|
|
|

|
|
|
|
|

|
2024-05-25 21:48:12 +02:00
|
|
|
|
|
|
|
|
### Description
|
|
|
|
|
|
|
|
|
|
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.
|
|
|
|
|
|
|
|
|
|
### POC
|
|
|
|
|
|
|
|
|
|
#### Reference
|
|
|
|
|
- https://huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0/
|
|
|
|
|
|
|
|
|
|
#### Github
|
|
|
|
|
- https://github.com/JavierOlmedo/JavierOlmedo
|
|
|
|
|
|