Mailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models/campaigns.js via /campaigns/clicked/ajax because variable column names are not properly escaped.
Dedicated Forum to help removing adware, malware, spyware, ransomware, trojans, viruses and more!
More Stories
Prison Time for Scheme to Frame Nurse for HIPAA Violations
Cybersecurity Agencies Warn of Accellion Vulnerability Exploits
Senate SolarWinds Hearing: 4 Key Issues Raised