CVE-2021-3021

ISPConfig before 3.2.2 allows SQL injection.

• CWE-89

• https://twitter.com/ispconfig/status/1346142615511724032Third Party Advisory
• https://www.ispconfig.org/blog/ispconfig-3-2-2-released-important-security-update/Release Notes, Vendor Advisory
• https://twitter.com/ispconfig/status/1346142615511724032Third Party Advisory
• https://www.ispconfig.org/blog/ispconfig-3-2-2-released-important-security-update/Release Notes, Vendor Advisory

Published

Jan 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30199In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Poin…5.5
• CVE-2021-3020An issue was discovered in ClusterLabs Hawk (aka HA Web Kons…8.8
• CVE-2021-30201The API /vsaWS/KaseyaWS.asmx can be used to submit XML to th…7.5
• CVE-2021-30203A reflected cross-site scripting (XSS) vulnerability in the …6.1
• CVE-2021-30205Incorrect access control in the component /index.php?mod=sys…5.3
• CVE-2021-30209Textpattern V4.8.4 contains an arbitrary file upload vulnera…6.5
• CVE-2021-30211Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripti…5.4
• CVE-2021-30212Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripti…5.4
• CVE-2021-30213Knowage Suite 7.3 is vulnerable to unauthenticated reflected…6.1
• CVE-2021-30214Knowage Suite 7.3 is vulnerable to Stored Client-Side Templa…5.4
• CVE-2021-30216Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30218samurai 1.2 has a NULL pointer dereference in writefile() in…5.5