PT-2022-27977 · Trueconf · Trueconf Server

Андрей Ситников + 2 · Published 2022-11-28 · Updated 2026-02-09 · CVE-2022-46763

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TrueConf Server version 5.2.0.10225

Description A SQL injection issue in a database stored function allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.

Recommendations For TrueConf Server version 5.2.0.10225, consider restricting database access to prevent low-privileged users from executing arbitrary SQL commands until a patch is available. As a temporary workaround, limit the privileges of the database user to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-04605

CVE-2022-46763

Affected Products

Trueconf Server

References · 13

• 🔥 https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt · Exploit
• https://bdu.fstec.ru/vul/2026-04605 · Security Note
• https://osv.dev/vulnerability/CVE-2022-46763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46763 · Security Note
• https://trueconf.ru/products/changelog.html#server-5-2-6 · Note
• https://t.me/cveNotify/151158 · Telegram Post
• https://t.me/cvenotify/118936 · Telegram Post
• https://t.me/cvenotify/49074 · Telegram Post
• https://solidlab.ru/our-news/145-trueconf.html · Note
• https://vuldb.com/?diff.216851 · Note
• https://t.me/cveNotify/149390 · Telegram Post
• https://t.me/cibsecurity/55382 · Telegram Post
• https://t.me/cveNotify/151423 · Telegram Post