CoreCVE
Back

HIGH

A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query

Published Aug 9, 2023

Description

A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-78

OS Command Injection

CWE-89

SQL Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Securifera
Published Aug 9, 2023
Updated Oct 10, 2024
Reserved Aug 9, 2023
Link CVE-2022-48587

CISA Vulnrichment

Updated Oct 10, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-48587

Red Hat

No data

ENISA EUVD

Assigner Securifera
Published Aug 9, 2023
Updated Oct 10, 2024
Link EUVD-2022-51283

GitHub

No data