Lucene search
PRIOn knowledge basePRION:CVE-2022-44005HistoryNov 16, 2022 - 11:15 p.m.
Code injection
2022-11-1623:15:00
PRIOn knowledge base
www.prio-n.com
2
code injection
backclick professional
verification links
newsletter sign-up
unauthorized access
e-mail addresses
An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the newsletter sign-up functionality is vulnerable to the enumeration of subscribers’ e-mail addresses. Furthermore, it is possible to subscribe and verify other persons’ e-mail addresses to newsletters without their consent.
Related
cvelist
cvelist
CVE-2022-44005
2022-11-16 00:00:00
cve
cve
CVE-2022-44005
2022-11-16 23:15:12
nvd
nvd
CVE-2022-44005
2022-11-16 23:15:12