CVE-2022-3800
Assigner: VulDB
Published: 2022-11-01T00:00:00
State: PUBLISHED
title: IBAX go-ibax rowsInfo sql injection
descriptions: value: A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument table_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212636.
affected: vendor: IBAX
product: go-ibax
versions: version: n/a
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
problemTypes: descriptions: type: CWE
description: CWE-707 Improper Neutralization -> CWE-74 Injection -> CWE-89 SQL Injection
cweId: CWE-707
x_generator: vuldb.com