CVE-2022-26285

Published: 2022-03-21T23:15Z

Last Modified: 2024-11-21T06:53Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt