Lucene search

CVE-2022-48082

🗓️ 02 Feb 2023 21:46:22Reported by mitreType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Easyone CRM v5.50.02 SQL Injection via text paramete

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2022-48082	2 Feb 202300:00	–	cvelist
Vulnrichment	CVE-2022-48082	2 Feb 202300:00	–	vulnrichment
Prion	Sql injection	2 Feb 202321:22	–	prion
NVD	CVE-2022-48082	2 Feb 202321:22	–	nvd

Nvd

Node

easyone easyone_crmMatch5.50.02

Source	Link
github	www.github.com/purplededa/EasyoneCRM-5.50.02-SQLinjection

Parameter	Position	Path	Description	CWE
text	query param	/Services/Misc.asmx/SearchTag	SQL Injection vulnerability in the text parameter allowing attackers to manipulate SQL queries.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Feb 2023 21:22Current

9.7High risk

Vulners AI Score9.7

CVSS39.8

EPSS0.00066

SSVC

CWE-89