MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.

Published Jan 14, 2025 · Updated Feb 3, 2025 · Assigned by mitre