CVE-2022-23337

creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:21+00:00| seen| https://t.me/cibsecurity/37467 2022-06-23 14:10:35+00:00| exploited| https://t.me/GithubRedTeam/2565 2022-07-12 13:38:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2688 2022-07-12 13:50:56+00:00|...

CVE-2022-23337

DedeCMS v5.7.87 contains a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter. Connected sources (NVD, Red Hat, CNNVD, etc.) describe this as a SQLi affecting the page logic and parameter ids, with CVSS v3.1 base score 9.8 (CRITICAL) and CVSSv2 7.5 (HIGH), indicating ...

SQL Servers Time-based SQL Injection (CVE-2011-4710; CVE-2019-13978; CVE-2019-16065; CVE-2019-16119; CVE-2019-16383; CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2021-21916; CVE-2021-21917; CVE-2022-23337; CVE-2022-25149)

SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or execute arbitrary code on affected servers...