Net is a survey software from ClassApps, Inc. built using Microsoftโs cutting-edge . A SQL injection vulnerability exists in the ID parameter of the UploadedImageDisplay.aspx endpoint, which can be exploited by an unauthenticated attacker to retrieve data from the applicationโs back-end database via Boolean-based blind injection and UNION injection.
CPE | Name | Operator | Version |
---|---|---|---|
classapps selectsurvey.net | lt | 5.052.000 |