Unrated
Time-based SQL injection exists in Spotweb 1.4.9 via the query string.
CVE-2020-35545
First seen on SecPulse
References
- advisory github.com