cve/2021/CVE-2021-43971.md
2025-09-29 21:09:30 +02:00

745 B

CVE-2021-43971

Description

A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter.

POC

Reference

Github