CVE-2022-23865

Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx. To exploit this vulnerability, an attacker must inject '"> on the thes1 parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-04-15

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Nyron (Wecul)

References

• https://www.exploit-db.com/exploits/50674