Lucene search

MitreCVE-2021-29378

HistoryAug 11, 2023 - 2:15 p.m.

CVE-2021-29378

2023-08-1114:15:12

CWE-89

mitre

web.nvd.nist.gov

cve

sql injection

pear-admin-think

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

35.4%

JSON

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php.

Affected configurations

Nvd

Node

pearadminpear_admin_thinkMatch2.1.2

VendorProductVersionCPE
pearadminpear_admin_think2.1.2cpe:2.3:a:pearadmin:pear_admin_think:2.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pearadmin	pear_admin_think	2.1.2	cpe:2.3:a:pearadmin:pear_admin_think:2.1.2:::::::*

References

gitee.com/pear-admin/Pear-Admin-Think/issues/I3DIEC

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

35.4%

JSON

Related for CVE-2021-29378