Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.Referenceshttps://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayuri_k/2022/Orange-Station-1.0