CVE-2021-45253 - CVE House
Back to Database
Status published Critical CVE-2021-45253

The id parameter in view_storage.php from Simple Cold Storage Management...

Vulnerability Description

The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45253

Credits & Attribution

No credits recorded in the NVD database.

References

More from simple cold storage management system project

View All →
CVE-2022-43230
Simple Cold Storage Management System v1.0 was discovered to contain...
Unknown 0
CVE-2022-43229
Simple Cold Storage Management System v1.0 was discovered to contain...
Unknown 0
CVE-2022-42230
Simple Cold Storage Management System v1.0 is vulnerable to SQL...
Unknown 0

Affected Vendor

simple cold storage management system project

View all reports →

Affected Software

simple cold storage managment system
Vulnerable Versions:
1.0

Timeline

Official Publish: December 21st, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.