CVE-2022-46484

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-922

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/WodenSec/CVE-2022-46484Third Party Advisory
https://github.com/WodenSec/CVE-2022-46484Third Party Advisory

Timeline

Published: Aug 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-464857.5Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Fi CVE-2022-464865.5A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensiti CVE-2022-464877.8Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel CVE-2022-464895.5GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c.CVE-2022-46495.4The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which could allow users w CVE-2022-464905.5GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c.CVE-2022-464916.5A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbi CVE-2022-464926.5nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/CVE-2022-464939.8Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.CVE-2022-464965.9BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.CVE-2022-464978.1Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_p CVE-2022-464982.7Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single