CVE-2022-41390 - OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php

CRITICAL

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php

Published Oct 13, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.81%

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://gist.github.com/fgimenesp/a30dcc4fb7912334b6fb1b145a56ad88		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 13, 2022

Updated May 15, 2025

Reserved Sep 26, 2022

Updated May 15, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a