critical9.8
CVE-2022-44785
An issue was discovered in Appalti & Contratti 9.12.2.
Impact
An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maggioli | Appalti \& Contratti | Version 9.12.2 |