Lucene search
K

4 matches found

OSV
OSV
added 2022/11/01 4:15 p.m.2 views

CVE-2022-3800

A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS5.7AI score0.39828EPSS
Exploits0References2
CVE
CVE
added 2022/11/01 12:0 a.m.65 views

CVE-2022-3800

IBAX go-ibax is affected by a SQL injection in /api/v2/open/rowsInfo (parameter: table_name). The issue is exploitable remotely and is supported by multiple sources (e.g., NVD entry for CVE-2022-3800 and nuclei-templates). Impact per the CVE entry is high/critical with potential data disclosure, ...

8.8CVSS7.6AI score0.39828EPSS
Exploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/11/01 12:0 a.m.15 views

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS3AI score0.39828EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/01 12:0 a.m.7 views

CVE-2022-3800 IBAX go-ibax rowsInfo sql injection

A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to sql injection. The attack may be launched remotely. The exploit has been...

6.3CVSS7AI score0.39828EPSS
Exploits0References2
Rows per page
Query Builder