CVE-2022-38771

CRITICAL

Transtek Mojodat Fixed Asset Management 2.4.6 - SQL Injection

Title source: llm
STIX 2.1

Description

The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://transtek.com/mojodat-fixed-assets/
Third Party Advisory x_refsource_misc
https://mojodat-vulnerabilities.netlify.app/

Scores

CVSS v3 9.8
EPSS 0.0102
EPSS Percentile 59.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
transtek/mojodat_fixed_asset_management 2.4.6
Published Sep 13, 2022
Tracked Since Feb 18, 2026