CVE-2023-37824

Sitolog sitologapplicationconnect v7.8.a and before was discovered to contain a SQL injection vulnerability via the component /activatehook.php...

CVE-2023-37824

Sitolog Sitologapplicationconnect component /activate_hook.php in versions up to 7.8.a is affected by a SQL injection vulnerability (root cause: vulnerable /activate_hook.php handling of input). CVSS v3.1 base score 9.8 (CRITICAL; Network, Low interaction, No privileges required; impact on Confid...