← CVE Intelligence

CVE-2022-39056

Changing Information Technology Inc. RAVA certificate validation system - SQL Injection PUBLISHED

Description (CNA)

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.

Affected (CNA)

Vendor / productVersions
Changing Information Technology Inc. / RAVA certificate validation systemaffected 3

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.