CVE-2021-27828

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

• CWE-89

• https://www.exploit-db.com/exploits/49884Exploit, Third Party Advisory, VDB Entry
• https://www.in4velocity.com/in4suite-erp.htmlProduct, Vendor Advisory
• https://www.exploit-db.com/exploits/49884Exploit, Third Party Advisory, VDB Entry
• https://www.in4velocity.com/in4suite-erp.htmlProduct, Vendor Advisory

Published

Jun 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27815NULL Pointer Deference in the exif command line tool, when p…5.5
• CVE-2021-27817A remote command execution vulnerability in shopxo 1.9.3 all…9.8
• CVE-2021-27821The Web Interface for OpenWRT LuCI version 19.07 and lower h…6.1
• CVE-2021-27822A persistent cross site scripting (XSS) vulnerability in the…4.8
• CVE-2021-27823An information disclosure vulnerability was discovered in /i…7.5
• CVE-2021-27825A directory traversal vulnerability on Mercury MAC1200R devi…7.5
• CVE-2021-27836An issue was discoverered in in function xls_getWorkSheet in…6.5
• CVE-2021-27839A CSV injection vulnerability found in Online Invoicing Syst…4.4
• CVE-2021-27845A Divide-by-zero vulnerability exists in JasPer Image Coding…5.5
• CVE-2021-27847Division-By-Zero vulnerability in Libvips 8.10.5 in the func…6.5
• CVE-2021-27850A critical unauthenticated remote code execution vulnerabili…9.8
• CVE-2021-27851A security vulnerability that can lead to local privilege es…5.5