CVE-2022-46763

Summary

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.

Affected Software

Weaknesses

• CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADP Enrichment

CVE Program Container

Additional References

• https://solidlab.ru/our-news/145-trueconf.html
• https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt
• https://vuldb.com/?diff.216851

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://solidlab.ru/our-news/145-trueconf.html
• https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt
• https://vuldb.com/?diff.216851

• ←Previous
• Next→