CVE-2020-24617

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped...

CVE-2020-24617: Improper Neutralization of Special Elements used in an SQL Command

Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped...

PT-2021-11048

Name of the Vulnerable Software and Affected Versions: Mailtrain versions 1.24.1 and earlier Description: The issue allows SQL Injection in the statsClickedSubscribersByColumn function in lib/models/campaigns.js via the "/campaigns/clicked/ajax" API endpoint because variable column names are not...