CVE-2022-3825

MEDIUM

Huaxia ERP 2.3 - SQL Injection via User Management Login Argument

Title source: llm
STIX 2.1

Description

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212792.

References (2)

Core 2
Core References
Third Party Advisory
https://vuldb.com/?id.212792

Scores

CVSS v3 6.3
EPSS 0.0054
EPSS Percentile 40.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-707
Status published
Products (1)
huaxiaerp/huaxia_erp 2.3
Published Nov 02, 2022
Tracked Since Feb 18, 2026