A vulnerability was found in luckyshot CRMx and classified as critical. This issue affects the function get/save/delete/comment/commentdelete of the file index.php. The manipulation leads to sql injection. The attack may be initiated remotely. The name of the patch is 8c62d274986137d6a1d06958a6f75c3553f45f8f. It is recommended to apply a patch to fix this issue. The identifier VDB-216185 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/luckyshot/CRMx/commit/8c62d274986137d6a1d06958a6f75c3553f45f8f | Patch Third Party Advisory |
| https://vuldb.com/?id.216185 | Third Party Advisory |
| https://github.com/luckyshot/CRMx/commit/8c62d274986137d6a1d06958a6f75c3553f45f8f | Patch Third Party Advisory |
| https://vuldb.com/?id.216185 | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/luckyshot/CRMx/commit/8c62d274986137d6a1d06958a6f75c3553f45f8f - Patch, Third Party Advisory | |
| References | () https://vuldb.com/?id.216185 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
22 Dec 2022, 16:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:crmx_project:crmx:-:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-74 |
|
| References | (N/A) https://vuldb.com/?id.216185 - Third Party Advisory | |
| References | (N/A) https://github.com/luckyshot/CRMx/commit/8c62d274986137d6a1d06958a6f75c3553f45f8f - Patch, Third Party Advisory |
19 Dec 2022, 02:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-12-18 08:15
Updated : 2024-11-21 07:35
NVD link : CVE-2022-4592
Mitre link : CVE-2022-4592
CVE.ORG link : CVE-2022-4592
JSON object : View
Products Affected
crmx_project
- crmx