CVE-2021-37358: SQL Injection

Published Aug 18, 2021

Updated

SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname=".

Affected Software

1 affected component

SEACMS SEACMS=2021-05-30

Event History

Aug 18, 2021

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-37358?

CVE-2021-37358 is a vulnerability in SEACMS v210530 that allows remote attackers to execute arbitrary code via a SQL injection in the component "admin_ajax.php?action=checkrepeat&v_name=".

How severe is CVE-2021-37358?

CVE-2021-37358 has a severity rating of 9.8 (Critical).

What software is affected by CVE-2021-37358?

SEACMS v210530 (2021-05-30) is affected by CVE-2021-37358.

How can the SQL injection vulnerability in SEACMS v210530 be exploited?

The SQL injection vulnerability in SEACMS v210530 can be exploited by remote attackers to execute arbitrary code through the "admin_ajax.php?action=checkrepeat&v_name=" component.

Is there a fix for CVE-2021-37358?

There is currently no official fix available for CVE-2021-37358. It is recommended to apply security patches or updates provided by the software vendor.