Security Advisory

CVE-2021-47801

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-15 23:25:46

Last updated 2026-01-16 15:55:22

Assigner VulnCheck

CVSS score 8.8

State PUBLISHED

Description

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the 'login_user' parameter during authentication requests. Attackers can exploit this vulnerability by crafting malicious POST requests with specially constructed SQL payloads that trigger database sleep functions to extract information.

← Browse all CVEs View on cve.org ↗