CVE-2022-46764
published 2022-12-27CVE-2022-46764: A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL…
PriorityP267critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.07%
79.0th percentile
A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| trueconf | server | < 5.2.6 | 5.2.6 |
| trueconf | trueconf_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46764.txthttps://solidlab.ru/our-news/145-trueconf.htmlhttps://vuldb.com/?diff.216845https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46764.txthttps://solidlab.ru/our-news/145-trueconf.htmlhttps://vuldb.com/?diff.216845
2022-12-27
Published