Selesta Visual Access Manager SQL Injection Vulnerability

Selesta Visual Access Manager VAM is the Selesta Visual Access Manager. A SQL injection vulnerability exists in Selesta Visual Access Manager VAM versions 4.15.0 through 4.29. An attacker can exploit the vulnerability by injecting the 'persoid' parameter into the /tools/VamPersonPhoto.php file to...