CVE-2023-7146 gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...

CVE-2023-7146

CVE-2023-7146 affects gopeak MasterLab up to version 3.3.10, specifically the HTTP POST Request Handler’s function sqlInjectDelete in app/ctrl/framework/Feature.php. The vulnerability arises from manipulation of the phone argument, enabling SQL injection. Public exploitation of this issue has bee...