Lucene search
@huntrdevCVELIST:CVE-2022-0944HistoryMar 15, 2022 - 1:00 a.m.
CVE-2022-0944 Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad
2022-03-1501:00:15
CWE-1336
@huntrdev
www.cve.org
2
cve
template injection
rce
github
sqlpad
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
45.7%
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
CNA Affected
[
{
"product": "sqlpad/sqlpad",
"vendor": "sqlpad",
"versions": [
{
"lessThan": "6.10.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
sqlpad has an unspecified vulnerability
2022-03-16 00:00:00
huntr
huntr
Template injection in connection test endpoint leads to RCE
2022-03-11 21:30:34
nvd
nvd
CVE-2022-0944
2022-03-15 01:15:07
cve
cve
CVE-2022-0944
2022-03-15 01:15:07
prion
prion
Sql injection
2022-03-15 01:15:00
osv
osv
CVE-2022-0944
2022-03-15 01:15:07
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
45.7%
Related for CVELIST:CVE-2022-0944