CVE-2022-44785

n/a / n/a PUBLISHED

Description (CNA)

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/

ADP enrichment

CVE

No English description supplied.

https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/

CISA-ADP

No English description supplied.

No references supplied.