CVE-2022-45889
Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records stored in the database, and achieve the ability to execut…
Published: 2022-12-25 · CVSS: 7.2 · CVSS 3.1
Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to all records stored in the database, and achieve the ability to execute arbitrary SQL commands, via Search (the StatisticsResults.aspx flt parameter).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7