CVE-2021-4308

A vulnerability was found in WebPA up to 3.1.1. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version 3.1.2 is able to address this issue. The identifier of the patch is 8836c4f549181e885a68e0e7ca561fdbcbd04bf0. It is recommended to upgrade the affected component. The identifier VDB-217637 was assigned to this vulnerability.

• CWE-89
• CWE-89

• https://github.com/WebPA/WebPA/commit/8836c4f549181e885a68e0e7ca561fdbcbd04bf0Patch
• https://github.com/WebPA/WebPA/pull/87Patch
• https://github.com/WebPA/WebPA/releases/tag/v3.1.2Release Notes
• https://vuldb.com/?ctiid.217637Third Party Advisory
• https://vuldb.com/?id.217637Third Party Advisory
• https://github.com/WebPA/WebPA/commit/8836c4f549181e885a68e0e7ca561fdbcbd04bf0Patch
• https://github.com/WebPA/WebPA/pull/87Patch
• https://github.com/WebPA/WebPA/releases/tag/v3.1.2Release Notes
• https://vuldb.com/?ctiid.217637Third Party Advisory
• https://vuldb.com/?id.217637Third Party Advisory

Published

Jan 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43074An improper verification of cryptographic signature vulnerab…4.3
• CVE-2021-43075A improper neutralization of special elements used in an os …8.8
• CVE-2021-43076An improper privilege management vulnerability [CWE-269] in …6.5
• CVE-2021-43077A improper neutralization of special elements used in an sql…8.8
• CVE-2021-43078Rejected reason: Not used
• CVE-2021-43079Rejected reason: Not used
• CVE-2021-43080An improper neutralization of input during web page generati…5.4
• CVE-2021-43081An improper neutralization of input during web page generati…6.1
• CVE-2021-43082Buffer Copy without Checking Size of Input ('Classic Buffer …9.8
• CVE-2021-43083Apache PLC4X - PLC4C (Only the C language implementation was…8.8
• CVE-2021-43084An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 v…9.8
• CVE-2021-43085Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…