Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-0944

Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.10.1
10 proofs of concept on GitHub

Summary

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • sqlpad sqlpad/sqlpad

    fixed in 6.10.1

References 12

huntr.dev

GitHub · sqlpad/sqlpad

GitHub · 0xDTC/SQLPad-6.10.0-Exploit-CVE-2022-0944

GitHub · 0xRoqeeb/sqlpad-rce-exploit-CVE-2022-0944

GitHub · Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-0944

GitHub · FlojBoj/CVE-2022-0944

GitHub · LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944

GitHub · NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944

GitHub · Philip-Otter/CVE-2022-0944_RCE_Automation

GitHub · Robocopsita/CVE-2022-0944_RCE_POC

GitHub · shhrew/CVE-2022-0944

GitHub · toneillcodes/CVE-2022-0944