Lucene search
Veracode Vulnerability DatabaseVERACODE:35359HistoryMay 04, 2022 - 11:57 a.m.
SQL Injection
2022-05-0411:57:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.002 Low
EPSS
Percentile
52.3%
mediawiki/core is vulnerable to sql injection. The vulnerability exists due to insecure quote handling in the getAllOrValues function in SDAppliedFilter.php allows an attacker to inject arbitrary queries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mediawiki/core | le | 1.37.1 | |
| mediawiki/core | le | 1.37.1 |
Related
cve
cve
CVE-2022-29904
2022-04-29 04:15:10
osv
osv
BIT-mediawiki-2022-29904
2024-03-06 11:05:43
CVE-2022-29904
2022-04-29 04:15:10
checkpoint_advisories
checkpoint_advisories
MediaWiki Semantic Drilldown SQL Injection (CVE-2022-29904)
2022-05-23 00:00:00
prion
prion
Sql injection
2022-04-29 04:15:00
cvelist
cvelist
CVE-2022-29904
2022-04-29 03:43:51
nvd
nvd
CVE-2022-29904
2022-04-29 04:15:10
cnvd
cnvd
MediaWiki SQL Injection Vulnerability
2022-05-16 00:00:00