CVE-2022-34878

🗓️ 05 Jul 2022 15:40:27Reported by rapid7Type

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 75 Views🌐 WEB

SQL Injection vulnerability in VICIdial user_stats.php

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-34878	30 Jun 202221:07	–	attackerkb
Circl	CVE-2022-34878	22 Sep 202215:12	–	circl
CNNVD	VICIdial SQL注入漏洞	5 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-34878 VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.	5 Jul 202215:40	–	cvelist
NVD	CVE-2022-34878	5 Jul 202216:15	–	nvd
OSV	CVE-2022-34878	5 Jul 202216:15	–	osv
Packet Storm	VICIdial Multiple Authenticated SQL Injection	1 Sep 202400:00	–	packetstorm
Prion	Sql injection	5 Jul 202216:15	–	prion
Rapid7 Blog	Metasploit Weekly Wrap-Up	23 Sep 202218:50	–	rapid7blog

NVD

Node

vicidial vicidialMatch2.14b0.53555

[
  {
    "product": "VICIdial",
    "vendor": "VICIdial",
    "versions": [
      {
        "lessThan": "3555",
        "status": "affected",
        "version": "2.14b0.5",
        "versionType": "custom"
      }
    ]
  }
]