CVE-2021-26795

ALTO 8.8CVE-2021-26795 · Published 14/11/2021 · updated 17/06/2026

In breve

CVE-2021-26795 è una vulnerabilità ALTO (CVSS 8.8) che riguarda sendquick alert plus server admin (talariax).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.9% delle vulnerabilità.
Correzione: aggiornare a 4.3 o successiva.

Package	Affected versions	Patched versions
sendquick alert plus server admin talariax	`= 4.3< 4.3`	`4.3`

Description

A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.

References

packetstormsecurity.com/files/164961/Talariax-sendQuick-Alertplus-Server-Admin-4.3-SQL-Injection.html · Exploit
seclists.org/fulldisclosure/2021/Nov/37 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free