Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-03-21T22:25:20
Updated: 2024-08-03T04:56:37.928Z
Reserved: 2022-02-28T00:00:00
Link: CVE-2022-26283
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-21T23:15:08.517
Modified: 2024-11-21T06:53:41.700
Link: CVE-2022-26283
Redhat
No data.