CVE-2022-44785

CRITICAL

9.8

Description

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauthenticated users, as demonstrated by the GetListaEnti.do cfamm parameter.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie11/21/2022

Derniere modification4/29/2025

Sourcenvd

Observations honeypot0

Produits affectes

maggioli:appalti_\&_contratti

Faiblesses (CWE)

CWE-89CWE-89

References

https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/(cve@mitre.org)

https://members.backbox.org/maggioli-appalti-contratti-multiple-vulnerabilities/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.