Description
SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Comerzzia | Comerzzia Backoffice: Sales Orchestrator | 3.0.15 | — |