CVE-2021-38167

Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.

Date published : 2021-08-07

https://github.com/hap-wi/roxy-wi/issues/285