CVE-2022-3827

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack can be initiated remotely. The name of the patch is 293b10628f7d9f83c6c82c78cf637cbe9b907369. It is recommended to apply a patch to fix this issue. VDB-212794 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-382727.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.CVE-2022-382737.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.CVE-2022-382747.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.CVE-2022-382757.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.CVE-2022-382767.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.CVE-2022-382777.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.CVE-2022-382787.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.CVE-2022-382797.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.CVE-2022-38284.8The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege useCVE-2022-382807.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.CVE-2022-382817.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.CVE-2022-382827.2JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.
CVE-2022-3827: Critical severity, CVSS 9.8 | Vulnix