CVE-2022-23168

The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin’–

Date published : 2022-06-13

https://www.gov.il/en/departments/faq/cve_advisories