Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-03-21T22:25:22
Updated: 2024-08-03T04:56:37.893Z
Reserved: 2022-02-28T00:00:00
Link: CVE-2022-26285
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-21T23:15:08.607
Modified: 2024-11-21T06:53:41.960
Link: CVE-2022-26285
Redhat
No data.