Back to search
CVE-2021-47704
Published: Dec 9, 2025
Modified: Apr 7, 2026
PUBLISHED
Description
OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code. Attackers can send GET requests to /debug/obix_test.php with malicious 'id' values to extract database information.
| Vendor | Product | Versions |
|---|---|---|
OPEN BMCS | OpenBMCS | affected 2.4 |
Weaknesses (CWE)
References
ExploitDB-50668
exploit
Official Product Homepage
product
Zero Science Lab Disclosure (ZSL-2022-5692)
third-party-advisory
VulnCheck Advisory: OpenBMCS SQL Injection via obix_test.php
third-party-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now