Sql injection

2023-10-1705:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

create customer group

remote authenticated users

arbitrary sql commands

nvd

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to execute arbitrary SQL commands via the ctl00$ContentPlaceHolder1$txtCustSQL parameter.

CPENameOperatorVersion
mailhunter_ultimatele2023

CPE	Name	Operator	Version
	mailhunter_ultimate	le	2023

References

zuso.ai/Advisory/ZA-2023-07