A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Ibax |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-7381 | A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability. |
 Github GHSA |
GHSA-m738-584h-26p6 | IBAX go-ibax vulnerable to SQL injection |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-03T01:20:57.627Z
Reserved: 2022-11-01T00:00:00
Link: CVE-2022-3801
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-11-01T16:15:14.057
Modified: 2024-11-21T07:20:15.657
Link: CVE-2022-3801
Redhat
No data.
OpenCVE Enrichment
No data.