Lucene search
CVE-2022-30528
SQL Injection in ISIC tour booking allows arbitrary command executio
Show more
| Reporter | Title | Published | Views | Family All 3 |
|---|---|---|---|---|
 | Sql injection | 1 Dec 202213:15 | – | prion |
 | CVE-2022-30528 | 1 Dec 202213:15 | – | nvd |
 | CVE-2022-30528 | 1 Dec 202200:00 | – | cvelist |
Node
| Source | Link |
|---|---|
| github | www.github.com/killmonday/isic.lk-RCE |
| github | www.github.com/asith-eranga/isic |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| username | query param | /system/user/modules/mod_users/controller.php | SQL Injection vulnerability allowing arbitrary command execution via username parameter. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo01 Dec 2022 13:15Current
9.9High risk
Vulners AI Score9.9
CVSS39.8
EPSS0.00264