CVE-2021-32428

SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books) 10 via the author_id parameter to api.php.

• CWE-89

• https://codecanyon.net/item/android-ebook-app-with-material-design/21680614Product, Third Party Advisory
• https://codecanyon.net/user/viaviwebtechProduct, Third Party Advisory
• https://owasp.org/www-community/attacks/Blind_SQL_InjectionThird Party Advisory
• https://veysel-xan.com/CVE-2021-32428.txtThird Party Advisory
• https://codecanyon.net/item/android-ebook-app-with-material-design/21680614Product, Third Party Advisory
• https://codecanyon.net/user/viaviwebtechProduct, Third Party Advisory
• https://owasp.org/www-community/attacks/Blind_SQL_InjectionThird Party Advisory
• https://veysel-xan.com/CVE-2021-32428.txtThird Party Advisory

Published

Jul 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3242DuxCMS v3.1.3 was discovered to contain a SQL injection vuln…9.8
• CVE-2021-32420dpic 2021.01.01 has a Heap-based Buffer Overflow in thestore…7.5
• CVE-2021-32421dpic 2021.01.01 has a Heap Use-After-Free in thedeletestring…7.5
• CVE-2021-32422dpic 2021.01.01 has a Global buffer overflow in theyylex() f…7.5
• CVE-2021-32424In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper ses…8.8
• CVE-2021-32426In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject ar…6.1
• CVE-2021-3243Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vu…6.1
• CVE-2021-32434abcm2ps v8.14.11 was discovered to contain an out-of-bounds …5.5
• CVE-2021-32435Stack-based buffer overflow in the function get_key in parse…5.5
• CVE-2021-32436An out-of-bounds read in the function write_title() in subs.…6.5
• CVE-2021-32437The gf_hinter_finalize function in GPAC 1.0.1 allows attacke…5.5
• CVE-2021-32438The gf_media_export_filters function in GPAC 1.0.1 allows at…5.5