Lucene search
CVE-2022-4871
Vulnerability in nflpick-em.com up to 2.2.x allows remote attackers to conduct SQL injection via the sort parameter in LoadUsers.php
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2022-4871 | 3 Jan 202312:15 | – | nvd |
 | CVE-2022-4871 ummmmm nflpick-em.com LoadUsers.php _Load_Users sql injection | 3 Jan 202311:00 | – | cvelist |
 | Sql injection | 3 Jan 202312:15 | – | prion |
 | CVE-2022-4871 | 3 Jan 202312:15 | – | osv |
Node
[
{
"vendor": "ummmmm",
"product": "nflpick-em.com",
"versions": [
{
"version": "2.0",
"status": "affected"
},
{
"version": "2.1",
"status": "affected"
},
{
"version": "2.2",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| sort | query param | html/includes/runtime/admin/JSON/LoadUsers.php | SQL injection vulnerability in the sort parameter of LoadUsers.php allowing remote attackers to manipulate SQL queries. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo03 Jan 2023 12:15Current
6.2Medium risk
Vulners AI Score6.2
CVSS25.8
CVSS34.7 - 7.2
EPSS0.00263