Unscored CVE-2022-24121 EUVD-2022-29033GHSA-w3pj-mp82-r9qh

SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information th…

Published Feb 3, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie parameter.

References

https://unifiedoffice.com/total-connect-now/
https://www.coresecurity.com/core-labs/advisories/unified-office-total-connect-sql-injection