high8.8
CVE-2022-34324
Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment…
Impact
Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sage | Sage Xrt Business Exchange | Version 12.4.302 |