CVE-2025-56450

Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...

CVE-2025-56450

Log2Space Subscriber Management Software 1.1 is vulnerable to an unauthenticated SQL injection vulnerability in the /l2s/api/selfcareLeadHistory endpoint. The root cause is a failure to sanitize the lead_id parameter, which allows a remote attacker to send a specially crafted POST request to exec...

CVE-2025-56450

Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the leadid parameter in the /l2s/api/selfcareLeadHistory endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. T...