CVE-2020-13505

Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability...

PT-2020-13582

Name of the Vulnerable Software and Affected Versions ednareporting.asmx affected versions not specified Description The issue allows for unauthenticated SQL injection attacks through the psClass parameter in the ednareporting.asmx service. An attacker can send specially crafted SOAP web requests...