Description
SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to retrieve, update and delete all information in the database by sending a specially crafted SQL query: https://XXXXXXX.saludydesafio.com/app/ax/checkBlindFields/ , parameters idChallenge and idEmpresa.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SportsNET | SportsNET | 4.0.1 | — |