CVE-2022-31787

Description

IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO

Related CPE's

a ideaco ideatms 2022 *******

References

https://gist.github.com/This-is-Neo/c91e1a0ed5d40fbcf0dada43ea1d7479

ExploitThird Party Advisory

https://gist.github.com/RNPG/ef10c0acceb650d43625a77d3472dd84

ExploitThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

AccessComplexity	LOW
ConfidentialityImpact	PARTIAL
AvailabilityImpact	PARTIAL
IntegrityImpact	PARTIAL
BaseScore	7.5
VectorString	AV:N/AC:L/Au:N/C:P/I:P/A:P
Version	2.0
AccessVector	NETWORK
Authentication	NONE

Created by Yello

About Severity.io