CVE-2021-3262

creationtimestamp| type| source ---|---|--- 2023-08-30 00:17:50+00:00| seen| https://t.me/cibsecurity/69394 2026-07-25 18:00:03+00:00| seen| Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4 2026-07-26 00:00:36+00:00| published-proof-of-concept|...

CVE-2021-3262

TripSpark VEO Transportation-2.2.x-XPBB-20201123-184084 NovusEDU-2.2.x-XPBB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the "Student Busing Information" search queri...