CVE-2022-24264

HIGHNuclei

Cuppa CMS v1.0 - SQL injection

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2022-24264 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryHIGHCuppa CMS v1.0 - SQL injectionCVSS 7.5

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.

Impact

Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire CMS system.

Remediation

Upgrade to the latest version of Cuppa CMS or apply the provided patch to fix the SQL injection vulnerability.

WeaknessesCWE-89
Authorstheamanrawat
Template tagscvecve2022sqlicuppaauthenticatedcuppacmsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:cuppacms:cuppacms:1.0:*:*:*:*:*:*:*
https://github.com/CuppaCMS/CuppaCMS https://nvd.nist.gov/vuln/detail/CVE-2022-24264 https://github.com/truonghuuphuc/CVE https://github.com/ARPSyndicate/cvemon https://github.com/Nguyen-Trung-Kien/CVE-1

Source: ProjectDiscovery

References

3