Description
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php.
Low · 3.8
CVE-2023-42236
EUVD-2023-46695GHSA-6qg3-p2qr-5hfv
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GE…
Published Jan 13, 2025 · Updated Jan 31, 2025 · Assigned by mitre