Critical severity9.8NVD Advisory· Published Nov 21, 2022· Updated Jun 17, 2026
CVE-2022-44785
CVE-2022-44785
Description
An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.
Affected products
3- cpe:2.3:a:maggioli:appalti_\&_contratti:9.12.2:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =9.12.2
Patches
Vulnerability mechanics
References
1- members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.