Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-43441

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.062
EPSS Ranking 90.4%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2022-43441
  • Ghost » Sqlite3 » Version: 5.0.0
    cpe:2.3:a:ghost:sqlite3:5.0.0
  • Ghost » Sqlite3 » Version: 5.0.1
    cpe:2.3:a:ghost:sqlite3:5.0.1
  • Ghost » Sqlite3 » Version: 5.0.10
    cpe:2.3:a:ghost:sqlite3:5.0.10
  • Ghost » Sqlite3 » Version: 5.0.11
    cpe:2.3:a:ghost:sqlite3:5.0.11
  • Ghost » Sqlite3 » Version: 5.0.2
    cpe:2.3:a:ghost:sqlite3:5.0.2
  • Ghost » Sqlite3 » Version: 5.0.3
    cpe:2.3:a:ghost:sqlite3:5.0.3
  • Ghost » Sqlite3 » Version: 5.0.4
    cpe:2.3:a:ghost:sqlite3:5.0.4
  • Ghost » Sqlite3 » Version: 5.0.5
    cpe:2.3:a:ghost:sqlite3:5.0.5
  • Ghost » Sqlite3 » Version: 5.0.6
    cpe:2.3:a:ghost:sqlite3:5.0.6
  • Ghost » Sqlite3 » Version: 5.0.7
    cpe:2.3:a:ghost:sqlite3:5.0.7
  • Ghost » Sqlite3 » Version: 5.0.8
    cpe:2.3:a:ghost:sqlite3:5.0.8
  • Ghost » Sqlite3 » Version: 5.0.9
    cpe:2.3:a:ghost:sqlite3:5.0.9
  • Ghost » Sqlite3 » Version: 5.1.0
    cpe:2.3:a:ghost:sqlite3:5.1.0
  • Ghost » Sqlite3 » Version: 5.1.1
    cpe:2.3:a:ghost:sqlite3:5.1.1
  • Ghost » Sqlite3 » Version: 5.1.2
    cpe:2.3:a:ghost:sqlite3:5.1.2
  • Ghost » Sqlite3 » Version: 5.1.3
    cpe:2.3:a:ghost:sqlite3:5.1.3
  • Ghost » Sqlite3 » Version: 5.1.4
    cpe:2.3:a:ghost:sqlite3:5.1.4


Contact Us

Shodan ® - All rights reserved