cleantalk
Vulnerabilities and Security Researches

Contact Form by Supsystic, 36559cb2-854e-4306-bae9-30c7965f84e0

Published on
-
Research Description
Contact Form by Supsystic [contact-form-by-supsystic] < 1.7.11 Contact Form by Supsystic &lt; 1.7.11 - Authenticated SQL Injections The GET parameters sidx and sord were used in a SQL statement without being sanitised when searching for Forms in the dashboard, leading to an authenticated SQL Injection issues.
Affected versions
max 1.7.11.
Status
vulnerable