CVE-2022-37333

🗓️ 24 Aug 2022 08:40:18Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 74 Views

SQL injection vuln. in Exment (PHP8) v5.0.2 & earlier, Laravel-admin v3.0.0 & earlier, (PHP7) v4.4.2 & earlier, Laravel-admin v2.2.2 & earlier allows remote attackers to execute arbitrary SQL commands

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-37333	24 Aug 202209:15	–	attackerkb
Circl	CVE-2022-37333	24 Aug 202212:22	–	circl
CNNVD	Exment SQL注入漏洞	24 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-37333	24 Aug 202208:40	–	cvelist
EUVD	EUVD-2022-6593	3 Oct 202520:07	–	euvd
Github Security Blog	exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability	25 Aug 202200:00	–	github
Japan Vulnerability Notes	JVN#46239102: Multiple vulnerabilities in Exment	24 Aug 202200:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in Exment	24 Aug 202205:23	–	jvn
NVD	CVE-2022-37333	24 Aug 202209:15	–	nvd
OSV	GHSA-P74Q-2PF8-J5JX exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability	25 Aug 202200:00	–	osv

NVD

Node

exceedone exmentRange≤5.0.2

exceedone laravel-adminRange≤3.0.0

[
  {
    "product": "Exment",
    "vendor": "Kajitori Co.,Ltd",
    "versions": [
      {
        "status": "affected",
        "version": "(PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier,  (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier"
      }
    ]
  }
]