cbcvebase.
CVE-2021-45814
published 2021-12-28

CVE-2021-45814: Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administrative account.

PriorityP270critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
6.34%
92.8th percentile
Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administrative account.

Affected

1 ranges
VendorProductVersion rangeFixed in
nettempnnt——

Detection & IOCsextracted from sources · hover to see the quote

url/index.php?id=status↗
commandusername=1%27+or+1%3D1%3B--&password=%5C&form_login=log↗
command1' or 1=1;--↗
  • →Detect SQLi authentication bypass attempts targeting Nettmp NNT by monitoring POST requests to /index.php?id=status containing SQL injection patterns in the username field (e.g., single quote followed by OR-based tautology and comment sequence). ↗
  • →Flag POST requests to /index.php?id=status where the body contains the parameter form_login=log alongside URL-encoded SQL injection payloads in the username field. ↗
  • →The attacker uses a backslash (\) as the password value alongside the SQL injection username payload to bypass authentication. ↗
  • ·The exploit was tested on Linux (Ubuntu 20.04); detection rules should be applied on the web application layer targeting the /index.php?id=status endpoint specifically. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.