CVE-2022-28132

The T-Soft E-Commerce 4 web application is vulnerable to SQL injection (SQLi) when authenticated as an admin or privileged user. This flaw allows attackers to use crafted requests to access and manipulate the database, bypass authentication mechanisms, and exfiltrate sensitive information. A proo...