Vulnerabilities

CVE-2021-38167 | BDVDB-2026-158283 Detail

Description#

Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/hap-wi/roxy-wi/issues/285

Exploit#

No public exploit known

History#

Version 12021-08-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.