CVE-2021-45406
CVE-2021-45406
In SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql' parameter in SQL query while generating a report. Upon successfully discovering the login admin password hash, it can be decrypted to obtain the plain-text password.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →