Sql injection

2022-07-0614:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, in any kind of rule. under the function : /AgilePointServer/Extension/FetchUsingEncodedData in the parameter: EncodedData

CPENameOperatorVersion
agilepoint_nxlt8.0

CPE	Name	Operator	Version
	agilepoint_nx	lt	8.0

References

www.gov.il/en/Departments/faq/cve_advisories