CVE-2022-44785

Description

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.

Related CPE's

amaggioliappalti_\&_contratti9.12.2*******

References

https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/

ExploitThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io