Skip to content

Instantly share code, notes, and snippets.

@Blackh4n

Blackh4n/CVE-2021-43362.txt

Last active November 29, 2021 16:25
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Blackh4n/9d8feaf1cfb68f66de17361e85f616d4 to your computer and use it in GitHub Desktop.
Save Blackh4n/9d8feaf1cfb68f66de17361e85f616d4 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2021-43362 MedData HBYS Boolen-base Blind SQL Injection - ORACLE
Raw
CVE-2021-43362.txt
# Product: MedData HBYS
# DBMS: ORACLE
# SQLi type: Oracle AND boolean-based blind - WHERE or HAVING clause (CTXSYS.DRITHSX.SN)
# Version: 1.0
# Description: A remote attacker can retrieve arbitrary sensitive data from SQL server with sending payloads over application to SQL server.
# Impact: Data manipulation/deletion
Sensitive data leak
Hijacking of systems
# Solution: The vendor has fixed the issue.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment