Lucene search
PRIOn knowledge basePRION:CVE-2021-45406HistoryJan 14, 2022 - 8:15 p.m.
Sql injection
2022-01-1420:15:00
PRIOn knowledge base
www.prio-n.com
1
In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using ‘sql’ parameter in SQL query while generating a report. Upon successfully discovering the login admin password hash, it can be decrypted to obtain the plain-text password.
Related
cvelist
cvelist
CVE-2021-45406
2022-01-14 19:25:16
nvd
nvd
CVE-2021-45406
2022-01-14 20:15:14
cve
cve
CVE-2021-45406
2022-01-14 20:15:14