PT-2022-22600 · Maccms10 · Maccms10

Gxbsxuking · Published 2022-08-17 · Updated 2022-08-24 · CVE-2022-35148

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions maccms10 versions v2021.1000.1081 through v2022.1000.3031

Description A SQL injection issue was found via the table parameter at the "database/columns.html" endpoint.

Recommendations For versions v2021.1000.1081 through v2022.1000.3031, avoid using the table parameter in the "database/columns.html" endpoint until a fix is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-35148

Affected Products

Maccms10

References · 3

• 🔥 https://github.com/magicblack/maccms10/issues/931 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-35148 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35148 · Vendor Advisory