Contact Form by Supsystic, 36559cb2-854e-4306-bae9-30c7965f84e0
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Contact Form by Supsystic [contact-form-by-supsystic] < 1.7.11 Contact Form by Supsystic < 1.7.11 - Authenticated SQL Injections The GET parameters sidx and sord were used in a SQL statement without being sanitised when searching for Forms in the dashboard, leading to an authenticated SQL Injection issues.
- Affected versions
-
max 1.7.11.
- Status
-
vulnerable