Lucene search
China National Vulnerability DatabaseCNVD-2022-77497HistoryMay 24, 2022 - 12:00 a.m.
imgurl sql injection vulnerability
2022-05-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.002 Low
EPSS
Percentile
54.6%
imgurl is a graphical bed application developed using PHP SQLite 3. imgurl version v2.3.1 is vulnerable to SQL injection. The vulnerability originates in /upload/localhost, where the ip is spliced directly into the sql statement, and can be exploited by attackers to cause SQL injection attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| imgurl imgurl v | eq | 2.31 |
Related
veracode
veracode
SQL Injection
2022-05-24 10:53:50
cve
cve
CVE-2022-29305
2022-05-24 03:15:09
osv
osv
SQL injection in helloxz/imgurl
2022-05-25 00:00:42
CVE-2022-29305
2022-05-24 03:15:09
prion
prion
Sql injection
2022-05-24 03:15:00
nvd
nvd
CVE-2022-29305
2022-05-24 03:15:09
cvelist
cvelist
CVE-2022-29305
2022-05-24 02:10:06
github
github
SQL injection in helloxz/imgurl
2022-05-25 00:00:42