CVE-2021-45255

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed.

• CWE-89

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Video-Sharing-WebsiteExploit, Third Party Advisory
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Video-Sharing-WebsiteExploit, Third Party Advisory

Published

Dec 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45229It was discovered that the "Trigger DAG with config" screen …6.1
• CVE-2021-45230In Apache Airflow prior to 2.2.0. This CVE applies to a spec…6.5
• CVE-2021-45231A link following privilege escalation vulnerability in Trend…7.8
• CVE-2021-45232In Apache APISIX Dashboard before 2.10.1, the Manager API us…9.8
• CVE-2021-45252Multiple SQL injection vulnerabilities are found on Simple F…9.8
• CVE-2021-45253The id parameter in view_storage.php from Simple Cold Storag…9.8
• CVE-2021-45256A Null Pointer Dereference vulnerability existfs in nasm 2.1…5.5
• CVE-2021-45257An infinite loop vulnerability exists in nasm 2.16rc0 via th…5.5
• CVE-2021-45258A stack overflow vulnerability exists in gpac 1.1.0 via the …5.5
• CVE-2021-45259An Invalid pointer reference vulnerability exists in gpac 1.…5.5
• CVE-2021-45260A null pointer dereference vulnerability exists in gpac 1.1.…5.5
• CVE-2021-45261An Invalid Pointer vulnerability exists in GNU patch 2.7 via…5.5