Security Advisory

CVE-2022-44015

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-12-25 00:00:00

Last updated 2025-04-15 13:28:50

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker is able to execute arbitrary commands on the MSSQL server via the xp_cmdshell extended procedure.

← Browse all CVEs View on cve.org ↗