CVE-2022-34324

n/a / n/a PUBLISHED

Description (CNA)

Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf

ADP enrichment

CVE

No English description supplied.

https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf

CISA-ADP

No English description supplied.

No references supplied.