CVE-2022-44785: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter...

PT-2022-27308 · Unknown · Appalti & Contratti

Name of the Vulnerable Software and Affected Versions: Appalti & Contratti version 9.12.2 Description: An issue was discovered in the target web applications, which are subject to multiple SQL Injection vulnerabilities. Some of these vulnerabilities are executable even by unauthenticated users, a...