CVE-2021-45255

Video Sharing Website 1.0 is affected by CVE-2021-45255 due to an SQL injection in the email parameter of ajax.php. The payload uses a sub-query calling MySQL load_file with a UNC file path pointing to an external URL, and the application interacted with that domain, indicating execution of the i...