Halo ITSM - Pre-Authentication SQL Injection
A Time-Based SQL Injection vulnerability in Halo ITSM allows unauthenticated attackers to execute malicious SQL queries by leveraging time delays, potentially leading to data exfiltration, privilege escalation, or full system compromise.
Halo ITSMPoC 已收录
CVSS—