Lucene search
MitreCVELIST:CVE-2022-44015HistoryDec 25, 2022 - 12:00 a.m.
CVE-2022-44015
2022-12-2500:00:00
mitre
www.cve.org
sql injection
simmeth lieferantenmanager
arbitrary command execution
mssql server
cve-2022-44015
An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xp_cmdshell extended procedure.
Related
cve
cve
CVE-2022-44015
2022-12-25 05:15:10
cnvd
cnvd
Simmeth System Supplier Manager SQL Injection Vulnerability
2022-11-21 00:00:00
nvd
nvd
CVE-2022-44015
2022-12-25 05:15:10
prion
prion
Sql injection
2022-12-25 05:15:00
zdt
zdt
packetstorm
packetstorm
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
2022-11-15 00:00:00