Lucene search
PRIOn knowledge basePRION:CVE-2022-44015HistoryDec 25, 2022 - 5:15 a.m.
Sql injection
2022-12-2505:15:00
PRIOn knowledge base
www.prio-n.com
5
simmeth lieferantenmanager
sql injection
arbitrary commands
mssql server
xp_cmdshell
nvd
An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xp_cmdshell extended procedure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lieferantenmanager | lt | 5.6 |
Related
cve
cve
CVE-2022-44015
2022-12-25 05:15:10
nvd
nvd
CVE-2022-44015
2022-12-25 05:15:10
cvelist
cvelist
CVE-2022-44015
2022-12-25 00:00:00
cnvd
cnvd
Simmeth System Supplier Manager SQL Injection Vulnerability
2022-11-21 00:00:00
zdt
zdt
packetstorm
packetstorm
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
2022-11-15 00:00:00