Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

Published Jul 26, 2022 · Updated Aug 3, 2024 · Assigned by mitre