From 18516817f966033ced536e3b2ab1845bac7d7212 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Thu, 30 Jun 2022 10:49:47 -0400 Subject: [PATCH] Enhancement: cves/2021/CVE-2021-37589.yaml by mp --- cves/2021/CVE-2021-37589.yaml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/cves/2021/CVE-2021-37589.yaml b/cves/2021/CVE-2021-37589.yaml index 030534c19e..9c908e0239 100644 --- a/cves/2021/CVE-2021-37589.yaml +++ b/cves/2021/CVE-2021-37589.yaml @@ -1,15 +1,15 @@ id: CVE-2021-37589 info: - name: Virtua Software Cobrança - Firebird Blind SQL Injection + name: Virtua Software Cobranca <12R - Blind SQL Injection author: princechaddha severity: high description: | - Virtua Cobranca before 12R allows SQL Injection on the login page. + Virtua Cobranca before 12R allows blind SQL injection on the login page. reference: - https://github.com/luca-regne/my-cves/tree/main/CVE-2021-37589 - https://www.virtuasoftware.com.br/ - - https://nvd.nist.gov/vuln/detail/CVE-2021-37589 - https://www.virtuasoftware.com.br/conteudo.php?content=downloads&lang=pt-br + - https://nvd.nist.gov/vuln/detail/CVE-2021-37589 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 @@ -56,3 +56,5 @@ requests: - 'contains(body_3, "Os parametros não estão informados corretamente")' - 'contains(body_3, "O CNPJ dos parametro não está informado corretamente")' condition: or + +# Enhanced by mp on 2022/06/30