Vulnerability Details CVE-2022-46763
A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.6%
CVSS Severity
CVSS v3 Score 8.8
References
- https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt
- https://solidlab.ru/our-news/145-trueconf.html
- https://vuldb.com/?diff.216851
- https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt
- https://solidlab.ru/our-news/145-trueconf.html
- https://vuldb.com/?diff.216851
Products affected by CVE-2022-46763
-
cpe:2.3:a:trueconf:server:4.3.7.12219
-
cpe:2.3:a:trueconf:server:4.3.7.12255
-
cpe:2.3:a:trueconf:server:5.2.0.10225
-
cpe:2.3:o:microsoft:windows:-