CVE-2022-4961

low-risk
Published 2024-01-12

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The associated identifier of this vulnerability is VDB-250243.

Do I need to act?

-
0.07% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Wetong Mall

Affected Vendors

Fuyanglipengjun

References (6)

Exploit https://gitee.com/fuyang_lipengjun/platform/issues/I5XC79
Permissions Required https://vuldb.com/?ctiid.250243
Third Party Advisory https://vuldb.com/?id.250243
Exploit https://gitee.com/fuyang_lipengjun/platform/issues/I5XC79
Permissions Required https://vuldb.com/?ctiid.250243
Third Party Advisory https://vuldb.com/?id.250243
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal