CVE-2021-4309

A vulnerability, which was classified as problematic, has been found in 01-Scripts 01ACP. This issue affects some unknown processing. The manipulation of the argument $_SERVER['SCRIPT_NAME'] leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is a16eb7da46ed22bc61067c212635394f2571d3c4. It is recommended to apply a patch to fix this issue. The identifier VDB-217649 was assigned to this vulnerability.

• CWE-79
• CWE-79

• https://github.com/01-Scripts/01ACP/commit/a16eb7da46ed22bc61067c212635394f2571d3c4Patch
• https://vuldb.com/?ctiid.217649Third Party Advisory
• https://vuldb.com/?id.217649Third Party Advisory
• https://github.com/01-Scripts/01ACP/commit/a16eb7da46ed22bc61067c212635394f2571d3c4Patch
• https://vuldb.com/?ctiid.217649Third Party Advisory
• https://vuldb.com/?id.217649Third Party Advisory

Published

Jan 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43081An improper neutralization of input during web page generati…6.1
• CVE-2021-43082Buffer Copy without Checking Size of Input ('Classic Buffer …9.8
• CVE-2021-43083Apache PLC4X - PLC4C (Only the C language implementation was…8.8
• CVE-2021-43084An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 v…9.8
• CVE-2021-43085Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-43086ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the…9.8
• CVE-2021-43090An XML External Entity (XXE) vulnerability exists in soa-mod…9.8
• CVE-2021-43091An SQL Injection vlnerability exits in Yeswiki doryphore 202…7.5
• CVE-2021-43094An SQL Injection vulnerability exists in OpenMRS Reference A…9.8
• CVE-2021-43097A Server-side Template Injection (SSTI) vulnerability exists…7.2
• CVE-2021-43098A File Upload vulnerability exists in bbs v5.3 via QuestionM…7.2
• CVE-2021-43099An Archive Extraction (AKA "Zip Slip) vulnerability exists i…4.9