Lucene search
China National Vulnerability DatabaseCNVD-2022-66696HistoryMay 18, 2022 - 12:00 a.m.
Calibre-Web SQL Injection Vulnerability
2022-05-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
0.002 Low
EPSS
Percentile
55.3%
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application’s lack of validation of externally entered SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| calibre-web calibre-web | lt | 0.6.18 |
Related
prion
prion
Sql injection
2022-05-16 02:15:00
veracode
veracode
SQL Injection
2022-05-17 11:50:35
osv
osv
CVE-2022-30765
2022-05-16 02:15:06
SQL injection in calibreweb
2022-05-17 00:01:46
cve
cve
CVE-2022-30765
2022-05-16 02:15:06
github
github
SQL injection in calibreweb
2022-05-17 00:01:46
nvd
nvd
CVE-2022-30765
2022-05-16 02:15:06
cvelist
cvelist
CVE-2022-30765
2022-05-16 01:50:53