CVE-2021-22854

The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege...

CVE-2021-22854

The CVE-2021-22854 entry concerns the Soar Cloud System HR Portal, where input parameter filtering failures enable an SQL injection in the HR portal. The root cause is inadequate validation of parameters, allowing remote attackers to inject SQL syntax and retrieve all database data without privil...