CVE-2021-41609

CRITICO 9.8CVE-2021-41609 · Published 28/01/2022 · updated 17/06/2026

In breve

CVE-2021-41609 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda selectsurvey.net (classapps).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 82.1% delle vulnerabilità.
Correzione: aggiornare a 5.052.000 o successiva.

Package	Affected versions	Patched versions
selectsurvey.net classapps	`< 5.052.000`	`5.052.000`

Description

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection.

References

classapps.com/product_ssv5.aspx · Product
optiv.com/insights/source-zero/blog/classapps-inc-selectsurveynet-v50-vulnerabilities-disclosure · Exploit

Altre vulnerabilità di selectsurvey.net

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free