A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function getHistory of the file doc_root/public_html/stracker/api.php. The manipulation of the argument symbol/startDate/endDate leads to sql injection. The identifier of the patch is 63e1b040373ee5b6c7d1e165ecf5ae1603d29e0a. It is recommended to apply a patch to fix this issue. The identifier VDB-218377 was assigned to this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2023-01-15T07:23:25.010Z

Updated: 2024-08-03T01:55:46.032Z

Reserved: 2023-01-14T17:16:04.443Z

Link: CVE-2022-4889

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-15T08:15:08.210

Modified: 2024-11-21T07:36:08.990

Link: CVE-2022-4889

cve-icon Redhat

No data.