Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-48592

A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and p

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Securifera

Description

A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ScienceLogic SL 1

Default version status: affected

  • 11.1.2affected

References