CVE-2022-3732 - seccome Ehoney set sql injection · CoreCVE

Back Back to CVE browser

CRITICAL

seccome Ehoney set sql injection

Published Oct 28, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.48%

Description

A vulnerability was found in seccome Ehoney and classified as critical. Affected by this issue is some unknown functionality of the file /api/v1/bait/set. The manipulation of the argument Payload leads to sql injection. The attack may be launched remotely. VDB-212414 is the identifier assigned to this vulnerability.

Affected products

Vendor Seccome Product Ehoney Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-707

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43088
Advisory
https://vuldb.com/?id.212414
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43088		Advisory
https://vuldb.com/?id.212414		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Oct 28, 2022

Updated Apr 15, 2025

Reserved Oct 28, 2022

Link CVE-2022-3732

CISA Vulnrichment

Updated Apr 14, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3732

Severity n/a

Public date n/a

Links CVE-2022-3732

Assigner VulDB

Published Oct 28, 2022

Updated Apr 15, 2025

Exploited since n/a

Link EUVD-2022-43088

EUVD-2022-43088