Vulnerability Details CVE-2022-45564
SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.6%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-45564
-
cpe:2.3:a:znfit:home_improvement_erp_management_system:42