Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-44161

Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Changing MOTP(Mobile One Time Password)

  • next of 3.5 to < unspecifiedaffected

References