Lucene search
Veracode Vulnerability DatabaseVERACODE:35669HistoryMay 24, 2022 - 10:53 a.m.
SQL Injection
2022-05-2410:53:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.002 Low
EPSS
Percentile
54.6%
helloxz/imgurl is vulnerable to SQL Injection attacks. A attacker is able to send malicious script through the query parameter in __construct() to execute SQL queries on the target system via /upload/localhost.
| CPE | Name | Operator | Version |
|---|---|---|---|
| helloxz/imgurl | eq | v2.31 | |
| helloxz/imgurl | eq | v2.31 |
Related
cve
cve
CVE-2022-29305
2022-05-24 03:15:09
osv
osv
SQL injection in helloxz/imgurl
2022-05-25 00:00:42
CVE-2022-29305
2022-05-24 03:15:09
prion
prion
Sql injection
2022-05-24 03:15:00
nvd
nvd
CVE-2022-29305
2022-05-24 03:15:09
cnvd
cnvd
imgurl sql injection vulnerability
2022-05-24 00:00:00
github
github
SQL injection in helloxz/imgurl
2022-05-25 00:00:42
cvelist
cvelist
CVE-2022-29305
2022-05-24 02:10:06