Lucene search
PRIOn knowledge basePRION:CVE-2022-44012HistoryDec 25, 2022 - 5:15 a.m.
Code injection
2022-12-2505:15:00
PRIOn knowledge base
www.prio-n.com
1
code injection
javascript
browser
password theft
encryption
vulnerability
An issue was discovered in /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId in Simmeth Lieferantenmanager before 5.6. An attacker can execute JavaScript code in the browser of the victim if a site is loaded. The victim’s encrypted password can be stolen and most likely be decrypted.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lieferantenmanager | lt | 5.6 |
Related
cvelist
cvelist
CVE-2022-44012
2022-12-25 00:00:00
nvd
nvd
CVE-2022-44012
2022-12-25 05:15:10
cve
cve
CVE-2022-44012
2022-12-25 05:15:10
cnvd
cnvd
Simmeth System Supplier Manager Cross-Site Scripting Vulnerability
2022-11-21 00:00:00
zdt
zdt
packetstorm
packetstorm
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
2022-11-15 00:00:00