CVE-2024-9982 — ESi Technology AIM LINE Marketing Platform - SQL Injection
AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers…
Published: 2024-10-15 · CVSS: 9.8 · CVSS 3.1
AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7