Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adrian Tobey | FormLift for Infusionsoft Web Forms | ≤ 7.5.17 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- FormLift for Infusionsoft Web Forms <= 7.5.17 - SQL Injection http/cves/2024/CVE-2024-38773.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.