CVE-2022-44290

CriticalCVSS 9.8/10Last modified Jul 9, 2026

Description

webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Dec 2, 2022
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-442919.8webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.CVE-2022-442947.2Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.CVE-2022-442957.2Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.CVE-2022-442967.2Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.CVE-2022-442979.8SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.CVE-2022-442989.8SiteServer CMS 7.1.3 is vulnerable to SQL Injection.CVE-2022-442994.9SiteServerCMS 7.1.3 sscms has a file read vulnerability.CVE-2022-443036.1Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedulCVE-2022-44315.4The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the pCVE-2022-443107.5In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived sharCVE-2022-443118.1html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. ThCVE-2022-443125.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called fro
CVE-2022-44290: Critical severity, CVSS 9.8 | Vulnix