CVE-2022-4961

CVSS V2 None CVSS V3 None

Description

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The associated identifier of this vulnerability is VDB-250243.

Overview

CVE ID
CVE-2022-4961

Assigner
VulDB

Vulnerability Status
PUBLISHED

Published Version
2024-01-12T05:00:05.110Z

Last Modified Date
2024-01-12T05:00:05.110Z

Weakness Enumerations

CWE	URL
CWE-89	http://cwe.mitre.org/data/definitions/89.html

References

Reference URL	Reference Tags
https://vuldb.com/?id.250243	vdb-entry technical-description
https://vuldb.com/?ctiid.250243	signature permissions-required
https://gitee.com/fuyang_lipengjun/platform/issues/I5XC79	issue-tracking

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-4961
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4961

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 16:37:57				Added to TrackCVE