CVE-2022-26283

creationtimestamp| type| source ---|---|--- 2022-03-22 01:26:33+00:00| seen| https://t.me/cibsecurity/39355...

CVE-2022-26283

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

CVE-2022-26283

Simple Subscription Website v1.0 is affected by a SQL injection in the view_plan endpoint (via the id parameter) that enables dumping the database through crafted HTTP requests. Red‑hat and other sources corroborate a database‑dump impact; the issue stems from unsafely interpolated id values. Mit...