# CVEs published 2022-09-11

9 CVEs were published on September 11, 2022: 0 critical, 0 high. Days are UTC.

- [CVE-2022-37796](https://cve.now/CVE-2022-37796.md): In Simple Online Book Store System 1.0 in /admin\_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripti (no CVSS)
- [CVE-2022-37794](https://cve.now/CVE-2022-37794.md): In Library Management System 1.0 the /card/in-card.php file id\_no parameters are vulnerable to SQL injection. (no CVSS)
- [CVE-2022-40325](https://cve.now/CVE-2022-40325.md): SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262. (no CVSS)
- [CVE-2022-40324](https://cve.now/CVE-2022-40324.md): SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258. (no CVSS)
- [CVE-2022-40323](https://cve.now/CVE-2022-40323.md): SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241. (no CVSS)
- [CVE-2022-40322](https://cve.now/CVE-2022-40322.md): SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579. (no CVSS)
- [CVE-2022-25295](https://cve.now/CVE-2022-25295.md): Open Redirect (CVSS 5.4, github.com/gophish/gophish)
- [CVE-2022-26049](https://cve.now/CVE-2022-26049.md): Arbitrary File Write via Archive Extraction (Zip Slip) (CVSS 5.3, com.diffplug.gradle:goomph)
- [CVE-2022-39135](https://cve.now/CVE-2022-39135.md): Apache Calcite: potential XEE attacks (no CVSS, Apache Software Foundation Apache Calcite · org.apache.calc…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.