Critical · 9.8 CVE-2021-3958 EUVD-2021-27166GHSA-vqww-3grf-6875

SQL Injection Vulnerability in Ipack SCADA Software

Published Nov 16, 2021 · Updated Sep 17, 2024 · Assigned by TR-CERT

Vendor: Ipack Automation Systems Product: Ipack SCADA Software

Description

Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0.

Affected products

Vendor	Product	Affected	Fixed
Ipack Automation Systems	Ipack SCADA Software	unspecified – < 1.1.0	1.1.0

References

https://github.com/paradessia/cve/blob/main/Ipack-Scada-Automation.txt exploit