Cookie

3 exploits Active since Jan 2022
CVE-2022-24124 NOMISEC HIGH WORKING POC
Casdoor < 1.13.1 - SQL Injection via Query API Parameters
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
2 stars
CVSS 7.5
CVE-2022-24124 INTHEWILD HIGH WORKING POC
Casdoor < 1.13.1 - SQL Injection via Query API Parameters
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
CVSS 7.5
CVE-2022-24124 INTHEWILD HIGH SCANNER
Casdoor < 1.13.1 - SQL Injection via Query API Parameters
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
CVSS 7.5