CVE-2025-56450: Improper Neutralization of Special Elements used in an SQL Command

Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...

PT-2025-42894

Name of the Vulnerable Software and Affected Versions Log2Space Subscriber Management Software version 1.1 Description Log2Space Subscriber Management Software version 1.1 contains a SQL injection flaw. An attacker can send a crafted POST request to the /l2s/api/selfcareLeadHistory endpoint,...