CVE-2022-44297

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-442989.8SiteServer CMS 7.1.3 is vulnerable to SQL Injection.CVE-2022-442994.9SiteServerCMS 7.1.3 sscms has a file read vulnerability.CVE-2022-443036.1Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedulCVE-2022-44315.4The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the pCVE-2022-443107.5In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived sharCVE-2022-443118.1html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. ThCVE-2022-443125.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called froCVE-2022-443135.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when caCVE-2022-443145.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExprCVE-2022-443155.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpreCVE-2022-443165.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGCVE-2022-443175.5PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from Expres
CVE-2022-44297: Critical severity, CVSS 9.8 | Vulnix