Lucene search
China National Vulnerability DatabaseCNVD-2022-22247HistoryMar 14, 2022 - 12:00 a.m.
FreeTAKServer-UI SQL Injection Vulnerability
2022-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.001 Low
EPSS
Percentile
32.8%
FreeTAKServer-UI is an open source FTS web interface from the FreeTAKTeam team.FreeTAKServer-UI is vulnerable to SQL injection, which stems from the API endpoint/AuthenticateUser containing SQL injection into the SQLite3 database, which can be exploited by an attacker to obtain the database All usernames, UsedIDs and plaintext passwords in the database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freetakteam freetakserver-ui | eq | 1.9.8 |
Related
osv
osv
CVE-2022-25506
2022-03-11 00:15:08
SQL Injection in FreeTAKServer-UI
2022-03-12 00:00:37
cvelist
cvelist
CVE-2022-25506
2022-03-10 23:35:37
cve
cve
CVE-2022-25506
2022-03-11 00:15:08
veracode
veracode
Information Disclosure
2022-03-14 07:18:54
nvd
nvd
CVE-2022-25506
2022-03-11 00:15:08
github
github
SQL Injection in FreeTAKServer-UI
2022-03-12 00:00:37
gitlab
gitlab
prion
prion
Sql injection
2022-03-11 00:15:00