CVE-2022-44015

CVE-2022-44015 affects the Simmeth Lieferantenmanager (Simmeth System GmbH) prior to version 5.6. The issue is a SQL injection vulnerability that allows an attacker to inject raw SQL queries. By activating MSSQL features, the attacker can execute arbitrary commands on the MSSQL server using the x...

CVE-2022-44015

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xpcmdshell extended procedure...