Логотип exploitDog
bind:CVE-2022-23320
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-23320

Количество 2

Количество 2

nvd логотип

CVE-2022-23320

около 4 лет назад

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-rfw3-r3r8-3gqr

около 4 лет назад

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-23320

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.

CVSS3: 7.5
0%
Низкий
около 4 лет назад
github логотип
GHSA-rfw3-r3r8-3gqr

XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.

CVSS3: 7.5
0%
Низкий
около 4 лет назад

Уязвимостей на страницу