VULNERABILITY INTELLIGENCE

CVE-2022-3998

CVSS score6.3 MEDIUM

EPSS probability0.55%

CISA KEVNot currently listed

Published2022-11-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability, which was classified as critical, was found in MonikaBrzica scm. This affects an unknown part of the file uredi_korisnika.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213699.

Weakness classification

cna@vuldb.com: CWE-707

Primary references

cna@vuldb.com — Exploit, Issue Tracking, Third Party Advisory
cna@vuldb.com — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory