Description
Improper neutralization of input provided by an unauthorized user into changes__reference_id parameter in URL allows for boolean-based Blind SQL Injection attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trol InterMedia | 2ClickPortal | < 7.14.3 | 7.14.3 |
References
- https://cert.pl/en/posts/2025/06/CVE-2025-4568 third-party-advisory
- https://2clickportal.pl/ product