CVE-2021-37413

GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login...

CVE-2021-37413

CVE-2021-37413 affects GRANDCOM DynWEB before 4.2. The backend login script does not validate or sanitize user input, enabling a remote unauthenticated attacker to perform a SQL injection in the admin login interface. Consequences reported in sources include administrative access to the webpage, ...