Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/03 12:00 a.m.•2 views

CVE-2022-4871: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the function LoadUsers of the file html/includes/runtime/admin/JSON/LoadUsers.php. The manipulation of the argument sort leads to sql injection. The attack can be initiated remotel...

7.2CVSS5.3AI score0.00651EPSS
SaveExploits0References3
Rows per page
Query Builder