CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/magicblack/maccms10/issues/931	Exploit Issue Tracking Patch Third Party Advisory
https://github.com/magicblack/maccms10/issues/931	Exploit Issue Tracking Patch Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3026::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3027::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3028::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3029::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3030::::::
	cpe:2.3:a:maccms:maccms:10.0:2022.1000.3031::::::

History

21 Nov 2024, 07:10

Type	Values Removed	Values Added
References	~~() https://github.com/magicblack/maccms10/issues/931 - Exploit, Issue Tracking, Patch, Third Party Advisory~~	() https://github.com/magicblack/maccms10/issues/931 - Exploit, Issue Tracking, Patch, Third Party Advisory

Information

Published : 2022-08-17 21:15

Updated : 2024-11-21 07:10

NVD link : CVE-2022-35148

Mitre link : CVE-2022-35148

CVE.ORG link : CVE-2022-35148

JSON object : View

Products Affected

maccms

maccms

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2022-35148", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-08-17T21:15:09.563", "references": [{"url": "https://github.com/magicblack/maccms10/issues/931", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/magicblack/maccms10/issues/931", "tags": ["Exploit", "Issue Tracking", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html."}, {"lang": "es", "value": "Se ha detectado que maccms10 versiones v2021.1000.1081 a v2022.1000.3031, contienen una vulnerabilidad de inyecci\u00f3n SQL por medio del par\u00e1metro table en el archivo database/columns.html."}], "lastModified": "2024-11-21T07:10:49.233", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7049FDA-9118-418C-9816-E2627C341D8F"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E3AD4C3-5452-4A33-B426-B0CBF2D56EAD"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FF6ADDF-1480-4A46-938E-C17BD227BEAE"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41E368B4-0B48-418B-923D-8368E3DC2372"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CDE0C52-4110-4A3B-BDF4-09D860C0F96F"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24CB165C-5EF3-4555-8907-80411877364D"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23181A63-9B13-42CF-A557-46CC4170CA35"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3026:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72466714-0BC2-4225-9A1D-FCF1698F6B52"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3027:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "370FB13E-4AFD-4A8D-A7F3-D9DB76C15FBC"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3028:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F7CACDA-7E15-4C09-A872-06DBDD5100B4"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3029:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B355B68-FF2D-4638-9818-E93D5308B6A1"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3030:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A8C9537-F79F-4D75-8934-C5E2B55F88F6"}, {"criteria": "cpe:2.3:a:maccms:maccms:10.0:2022.1000.3031:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8920192D-D202-4B0A-B035-0D3B81727CE0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

6.5 /10