CVE-2021-4336

A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduled_reports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to address this issue. The name of the patch is 6da9080faec9bca1ca5342386c0421dca0a6c0cc. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230084.

• CWE-89

• https://github.com/ITRS-Group/monitor-ninja/commit/6da9080faec9bca1ca5342386c0421dca0a6c0ccPatch
• https://github.com/ITRS-Group/monitor-ninja/releases/tag/v2021.11.30Release Notes
• https://vuldb.com/?ctiid.230084Permissions Required
• https://vuldb.com/?id.230084Third Party Advisory
• https://github.com/ITRS-Group/monitor-ninja/commit/6da9080faec9bca1ca5342386c0421dca0a6c0ccPatch
• https://github.com/ITRS-Group/monitor-ninja/releases/tag/v2021.11.30Release Notes
• https://vuldb.com/?ctiid.230084Permissions Required
• https://vuldb.com/?id.230084Third Party Advisory

Published

May 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43350An unauthenticated Apache Traffic Control Traffic Ops user c…9.8
• CVE-2021-43351Rejected reason: This is unused.
• CVE-2021-43353The Crisp Live Chat WordPress plugin is vulnerable to Cross-…8.8
• CVE-2021-43355Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)…9.8
• CVE-2021-43358Sunnet eHRD has inadequate filtering for special characters …7.5
• CVE-2021-43359Sunnet eHRD has broken access control vulnerability, which a…8.8
• CVE-2021-43360Sunnet eHRD e-mail delivery task schedule’s serialization fu…8.8
• CVE-2021-43361Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2021-43362Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2021-4337Sixteen XforWooCommerce Add-On Plugins for WordPress are vul…8.8
• CVE-2021-4338The 404 to 301 plugin for WordPress is vulnerable to authori…5.4
• CVE-2021-43388Unisys Cargo Mobile Application before 1.2.29 uses cleartext…7.5