high7.5
CVE-2019-11880
CommSy through 8.6.5 has SQL Injection via the cid parameter.
Impact
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Commsy | Commsy | through 8.6.5 |