CVE-2022-22294 - A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foreground and add a background administrator account

Back Back to CVE browser

CRITICAL

A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foreground and add a background administrator account

Published Jan 28, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.15%

Description

A SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL injection in the foreground and add a background administrator account.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27440
Advisory
https://github.com/zfaka-plus/zfaka/pull/237
x_refsource_MISCBroken Link
https://www.cnblogs.com/J0o1ey/p/15757096.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27440		Advisory
https://github.com/zfaka-plus/zfaka/pull/237		x_refsource_MISCBroken Link
https://www.cnblogs.com/J0o1ey/p/15757096.html		x_refsource_MISCExploitThird Party Advisory