CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to an SQL injection (SQLi) vulnerability when an attacker is authenticated as an admin or privileged user . By sending crafted requests, an attacker can access and manipulate the underlying database, potentially bypassing authentication mecha...

CVE-2022-28132: Improper Neutralization of Special Elements used in an SQL Command

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...