Planet eStream before 6.72.10.07... CVE-2022-45889

- AV AC AU C I A
发布: 2022-12-25
修订: 2023-01-04

Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records stored in the database, and achieve the ability to execute arbitrary SQL commands, via Search (the StatisticsResults.aspx flt parameter).

0%
当前有1条漏洞利用/PoC
当前有1条受影响产品信息