Главная → Уязвимости → CVE-2024-22719

8.1высокая

CVE-2024-22719

Описание

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client.

Затрагиваемое ПО

Formtools Form tools

CVSS

Балл	8.1 — высокая
Вектор	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Источники

https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/