CVE-2022-3955CWE-707

tholum crm42 Login class.user.php sql injection

High · published November 11, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of the file crm42\class\class.user.php of the component Login. The manipulation of the argument user_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213461 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00741 · 54.1th percentile
Weakness
CWE-707 · Improper Neutralization
Published
2022-11-11T00:00Z
EPSS history
Timeline
  • 11 NOV 00:00Z
    tholum crm42 Login class.user.php sql injection
    cvelistv5