Alldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename parameter at /data/masterdata/datas.

Published Apr 2, 2024 · Updated Sep 4, 2024 · Assigned by mitre