Vulnerability · Published Jun 13, 2022 · Assigned by INCD
CVE-2022-23168Amodat - Mobile Application Gateway SQL Injection (SQLi)
Medium 5.9
In plain English
A medium-severity SQL injection in Amodat from Amodat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.5%top 59.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--
Affected products (as reported)
Weakness: CWE-89 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://www.gov.il/en/departments/faq/cve_advisories x_refsource_MISC