CVE-2022-44003

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection at various locations...

CVE-2022-44004

CVE-2022-44004 affects BACKCLICK Professional 5.9.63. An insecure design or lack of authentication allows unauthenticated attackers to complete the password-reset process and set a new password. CVSS v3.1 base score 9.8 (CRITICAL) with Network attack, no privileges, no user interaction required, ...

CVE-2022-44002

CVE-2022-44002 affects BACKCLICK Professional 5.9.63. The issue is insufficient output encoding of user-supplied data in the web application, allowing cross-site scripting (XSS) at various locations. The available documents confirm the vulnerability and its impact (XSS) but do not provide explici...

CVE-2022-44000

BACKCLICK Professional 5.9.63 is affected by CVE-2022-44000 due to an exposed internal communications interface that enables arbitrary system command execution on the server. The vulnerability stems from access to an internal interface, allowing remote code execution with no privileges required (...