CVE-2021-42325: SQL Injection
Published Oct 12, 2021
·Updated
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.
Other sources
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.
Affected Software
2 affected componentsFixes available
composer/froxlor/froxlor<=0.10.29.1
0.10.30
Froxlor Froxlor<0.10.30
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/froxlor/froxlorto a version that resolves this vulnerability.Fixed in 0.10.30
Event History
Oct 12, 2021
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
Description
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 24, 2022
Advisory Published
via GitHub·07:17 PM
Frequently Asked Questions
1
What is the vulnerability ID for this SQL injection vulnerability in Froxlor?
The vulnerability ID for this SQL injection vulnerability in Froxlor is CVE-2021-42325.
2
What is the severity of CVE-2021-42325?
CVE-2021-42325 has a severity rating of 9.8 (critical).
3
How does this vulnerability affect Froxlor?
This vulnerability affects Froxlor versions up to and excluding 0.10.30.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-89.
5
How can I fix the SQL injection vulnerability in Froxlor?
To fix this vulnerability, you should update Froxlor to version 0.10.30 or later.