CVE-2022-44003

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection at various locations...

CVE-2022-44003

CVE-2022-44003 affects BACKCLICK Professional 5.9.63. The issue arises from insufficient escaping of user-supplied input, causing SQL injections at various locations. CVSS v3.1 base score is 9.8 (CRITICAL): network attack vector, low attack complexity, no privileges required, no user interaction,...

BACKCLICK 跨站脚本漏洞

BACKCLICK is a marketing software from BACKCLICK Germany that helps organizations create, implement, measure, and run web-based email campaigns. A security vulnerability exists in BACKCLICK Professional 5.9.63, which stems from insufficient output coding of user-supplied data allowing an attacker...

CVE-2022-44004

CVE-2022-44004 affects BACKCLICK Professional 5.9.63. An insecure design or lack of authentication allows unauthenticated attackers to complete the password-reset process and set a new password. CVSS v3.1 base score 9.8 (CRITICAL) with Network attack, no privileges, no user interaction required, ...