Description
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.
Unscored
CVE-2020-24617
EUVD-2020-17333GHSA-6hrp-g2cw-r29v
Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax bec…
Published Feb 19, 2021 · Updated Aug 4, 2024 · Assigned by mitre