CVE-2022-3826

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-266

Affected software

No affected versions have been published.

Timeline

Published: Nov 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-382607.2Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=ques CVE-2022-382657.2Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apar CVE-2022-382666.5An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) vi CVE-2022-382677.2School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/i CVE-2022-382687.2School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonu CVE-2022-382697.2School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstu CVE-2022-38279.8A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGrou CVE-2022-382727.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.CVE-2022-382737.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.CVE-2022-382747.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.CVE-2022-382757.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.CVE-2022-382767.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.