← All advisories

Critical severity9.8NVD Advisory· Published Apr 11, 2022· Updated Jul 5, 2026

CVE-2021-37291

CVE-2021-37291

Description

An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter in index.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

KevinLAB Inc/Building Energy Management System 4ST BEMSdescription
KevinLAB Inc/Building Energy Management System 4ST BEMSllm-fuzzy
Range: = 1.0.0
KevinLAB Inc/4ST BEMSllm-fuzzy
Range: = 1.0.0

Patches

Vulnerability mechanics

References

2

www.zeroscience.mk/en/vulnerabilities/nvdExploitThird Party Advisory
www.kevinlab.comnvdVendor Advisory

News mentions

0

No linked articles in our index yet.