CVE-2022-48082

Easyone CRM v5.50.02 is affected by CVE-2022-48082, a SQL Injection vulnerability in the text parameter of /Services/Misc.asmx/SearchTag. CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interaction. Documents do not provide exploitation details ...