CyberRota Analysis
AI analysis pending.
CVE
CVE-2021-27950
Severity
HIGH
CVSS
8.8
EPSS
1.68%
Original NVD Description
A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA.