First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-43216

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

AbrhilSoft Employee's Portal before v5.6.2 was discovered to contain a SQL injection vulnerability in the login page.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
abrhil	employees_portal	< 5.6.2

References

Timeline

Published: Apr 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-43227.2A vulnerability, which was classified as critical, was found in maku-boot up to 2.2.0. This affects the function doExecute of the file Abstr CVE-2022-432217.5open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a CVE-2022-432227.5open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a CVE-2022-432237.5open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Deni CVE-2022-432268.8Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=ap CVE-2022-432277.2Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/admin/?p CVE-2022-432287.2Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /clearance/clearance.CVE-2022-432297.2Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/update_CVE-2022-43237.2The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users suc CVE-2022-432307.2Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=book CVE-2022-432317.2Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php. This vul CVE-2022-432327.2Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchOrderDat

CVE-2022-43216: Critical severity, CVSS 9.1 | Vulnix