https://vulnerability.circl.lu/sightings/feed 2026-05-05T22:39:04.761446+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/aee43568-ddde-4237-9983-9e046e91002b/export 2026-05-05T22:39:05.130424+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "aee43568-ddde-4237-9983-9e046e91002b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37413", "type": "seen", "source": "https://t.me/cibsecurity/42982", "content": "\u203c CVE-2021-37413 \u203c\n\nGRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login script does not verify and sanitize user-provided strings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T18:29:39.000000Z"} 2022-05-19T18:29:39+00:00