CVE-2022-47870

MEDIUM

SQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-47870 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote attackers to inject arbitrary web Script or HTML via the returnUrl parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 14, 2025 · Source: CVE List

Proofs of concept

1

Catalogued exploits

ExploitDBSQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS)ExploitDB exploitby geeklinuxmanNot analyzed1 file
ExploitDB
PoC details

References

2