CVE-2022-4416

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function getReposAllUsers of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the argument searchWord/reposId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-215278 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-441637.5Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.CVE-2022-441677.5Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer.CVE-2022-441687.5Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic..CVE-2022-441697.5Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer.CVE-2022-44175.3The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpointCVE-2022-441719.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.CVE-2022-441729.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.CVE-2022-441749.8Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.CVE-2022-441759.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.CVE-2022-441769.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.CVE-2022-441779.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.CVE-2022-441789.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.
CVE-2022-4416: High severity, CVSS 8.8 | Vulnix