CVE-2021-47704 — OpenBMCS SQL Injection via obix_test.php
OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code. Attackers can send GET r…
Published: 2025-12-09 · CVSS: 8.7 · CVSS 4.0
OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code. Attackers can send GET requests to /debug/obix_test.php with malicious 'id' values to extract database information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7