CVE-2021-4290

A vulnerability was found in DHBW Fallstudie. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file app/config/passport.js of the component Login. The manipulation of the argument id/email leads to sql injection. The name of the patch is 5c13c6a972ef4c07c5f35b417916e0598af9e123. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216907.

• CWE-89

• https://github.com/maboehm/fallstudie/commit/5c13c6a972ef4c07c5f35b417916e0598af9e123Patch, Third Party Advisory
• https://vuldb.com/?ctiid.216907Third Party Advisory
• https://vuldb.com/?id.216907Third Party Advisory
• https://github.com/maboehm/fallstudie/commit/5c13c6a972ef4c07c5f35b417916e0598af9e123Patch, Third Party Advisory
• https://vuldb.com/?ctiid.216907Third Party Advisory
• https://vuldb.com/?id.216907Third Party Advisory

Published

Dec 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4289A vulnerability classified as problematic was found in OpenM…6.1
• CVE-2021-42890TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command inj…9.8
• CVE-2021-42891In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain se…7.5
• CVE-2021-42892In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start tel…4.3
• CVE-2021-42893In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain se…7.5
• CVE-2021-42897A remote command execution (RCE) vulnerability was found in …9.8
• CVE-2021-4291A vulnerability was found in OpenMRS Admin UI Module up to 1…6.1
• CVE-2021-42911A Format String vulnerability exists in DrayTek Vigor 2960 <…9.8
• CVE-2021-42912FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS c…8.8
• CVE-2021-42913The SyncThru Web Service on Samsung SCX-6x55X printers allow…7.5
• CVE-2021-42917Buffer overflow vulnerability in Kodi xbmc up to 19.0, allow…5.5
• CVE-2021-4292A vulnerability was found in OpenMRS Admin UI Module up to 1…6.1