SQL injection in the ID parameter of the...
Critical severity
Unreviewed
Published
Jan 29, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 28, 2022
Published to the GitHub Advisory Database
Jan 29, 2022
Last updated
Feb 3, 2023
SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection.
References