Sql injection

2022-06-0615:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc.

CPENameOperatorVersion
teammate\\+_auditeq28.0.19.0

CPE	Name	Operator	Version
	teammate\\+_audit	eq	28.0.19.0

References

mjilek.cz/blog/CVE-2021-41932/