Enhancement: cves/2021/CVE-2021-37589.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-30 10:49:47 -04:00
parent c21738d15f
commit 18516817f9
1 changed files with 5 additions and 3 deletions

View File

@ -1,15 +1,15 @@
id: CVE-2021-37589
info:
name: Virtua Software Cobrança - Firebird Blind SQL Injection
name: Virtua Software Cobranca <12R - Blind SQL Injection
author: princechaddha
severity: high
description: |
Virtua Cobranca before 12R allows SQL Injection on the login page.
Virtua Cobranca before 12R allows blind SQL injection on the login page.
reference:
- https://github.com/luca-regne/my-cves/tree/main/CVE-2021-37589
- https://www.virtuasoftware.com.br/
- https://nvd.nist.gov/vuln/detail/CVE-2021-37589
- https://www.virtuasoftware.com.br/conteudo.php?content=downloads&lang=pt-br
- https://nvd.nist.gov/vuln/detail/CVE-2021-37589
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
@ -56,3 +56,5 @@ requests:
- 'contains(body_3, "Os parametros não estão informados corretamente")'
- 'contains(body_3, "O CNPJ dos parametro não está informado corretamente")'
condition: or
# Enhanced by mp on 2022/06/30