An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter.

Published Sep 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre