SQL Injection Vulnerability in maccms10 by Magicblack
CVE-2022-35148

6.5MEDIUM

Key Information:

Vendor

Maccms

Status
Maccms
Vendor
CVE Published:
17 August 2022

What is CVE-2022-35148?

A SQL injection vulnerability exists in maccms10 versions v2021.1000.1081 to v2022.1000.3031, allowing attackers to manipulate database queries via the table parameter in the database/columns.html file. This could lead to unauthorized access to sensitive data within the application's database.

References

https://github.com/magicblack/maccms10/issues/931
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.