CVE-2021-43329

A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbitrary SQL commands via the license parameter.

• CWE-89

• https://cxsecurity.com/issue/WLB-2021110057Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/164947/Mumara-Classic-2.93-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/164947/mumaraclassic293-sql.txtExploit, Third Party Advisory, VDB Entry
• https://vulners.com/zdt/1337DAY-ID-37036Exploit, Third Party Advisory
• https://www.cyberdetails.org/2021/11/mumara-classic-293-sql-injection.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50518Exploit, Third Party Advisory, VDB Entry
• https://www.gen.net.uk/about-us/news/50-exploit-db/18335-webapps-mumara-classic-293-license-sql-injection-unauthenticatedExploit, Third Party Advisory
• https://www.linkedin.com/posts/shain-lakin_mumara-classic-293-license-sql-injection-activity-6867380934908506112-dAJdExploit, Third Party Advisory
• https://www.mumara.com/classic/Product
• https://cxsecurity.com/issue/WLB-2021110057Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/164947/Mumara-Classic-2.93-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/164947/mumaraclassic293-sql.txtExploit, Third Party Advisory, VDB Entry
• https://vulners.com/zdt/1337DAY-ID-37036Exploit, Third Party Advisory
• https://www.cyberdetails.org/2021/11/mumara-classic-293-sql-injection.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50518Exploit, Third Party Advisory, VDB Entry
• https://www.gen.net.uk/about-us/news/50-exploit-db/18335-webapps-mumara-classic-293-license-sql-injection-unauthenticatedExploit, Third Party Advisory
• https://www.linkedin.com/posts/shain-lakin_mumara-classic-293-license-sql-injection-activity-6867380934908506112-dAJdExploit, Third Party Advisory
• https://www.mumara.com/classic/Product

Published

Aug 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43320Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-43323An issue was discovered in UsbCoreDxe in Insyde InsydeH2O wi…8.2
• CVE-2021-43324LibreNMS through 21.10.2 allows XSS via a widget title.6.1
• CVE-2021-43325Automox Agent 33 on Windows incorrectly sets permissions on …7.8
• CVE-2021-43326Automox Agent before 32 on Windows incorrectly sets permissi…7.8
• CVE-2021-43327An issue was discovered on Renesas RX65 and RX65N devices. W…4.6
• CVE-2021-4333The WP Statistics plugin for WordPress is vulnerable to Cros…6.5
• CVE-2021-43331In GNU Mailman before 2.1.36, a crafted URL to the Cgi/optio…6.1
• CVE-2021-43332In GNU Mailman before 2.1.36, the CSRF token for the Cgi/adm…6.5
• CVE-2021-43333The Datalogic DXU service on (for example) DL-Axist devices …6.5
• CVE-2021-43334BuddyBoss Platform through 1.8.0 allows XSS via the Group Na…5.4
• CVE-2021-43336An Out-of-Bounds Write vulnerability exists when reading a D…7.8