Security Advisory

CVE-2021-47801

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-15 23:25:46
Last updated 2026-01-16 15:55:22
Assigner VulnCheck
State PUBLISHED

Description

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the login_user parameter during authentication requests. Attackers can exploit this vulnerability by crafting malicious POST requests with specially constructed SQL payloads that trigger database sleep functions to extract information.