Lucene search
PRIOn knowledge basePRION:CVE-2022-48591HistoryAug 09, 2023 - 7:15 p.m.
Sql injection
2023-08-0919:15:00
PRIOn knowledge base
www.prio-n.com
2
sql injection
sciencelogic sl1
vendor print report
nvd
vulnerability
unsanitized input
arbitrary sql
database
A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
Related
cvelist
cvelist
CVE-2022-48591
2023-08-09 18:04:59
nvd
nvd
CVE-2022-48591
2023-08-09 19:15:12
cve
cve
CVE-2022-48591
2023-08-09 19:15:12
cnvd
cnvd
ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66427)
2023-08-12 00:00:00