CVE-2022-3800

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument table_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212636.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380008.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-380016.5Microsoft Office Spoofing VulnerabilityCVE-2022-380037.8Windows Resilient File System Elevation of PrivilegeCVE-2022-380047.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2022-380057.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-380066.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-380077.8Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege VulnerabilityCVE-2022-380088.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-380098.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-38018.8A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfoCVE-2022-380107.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2022-380117.3Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-3800: High severity, CVSS 8.8 | Vulnix