Description
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| sqlpad | sqlpad/sqlpad | unspecified – < 6.10.1 | 6.10.1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 10 repositories
-
0xRoqeeb/sqlpad-rce-exploit-CVE-2022-0944 ★ 9 · Sep 10, 2024
-
shhrew/CVE-2022-0944 ★ 7 · Sep 8, 2024
A proof of concept exploit for SQLPad RCE (CVE-2022-0944).
-
FlojBoj/CVE-2022-0944 ★ 5 · Sep 9, 2024
SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])
-
Robocopsita/CVE-2022-0944_RCE_POC ★ 2 · Sep 13, 2024
-
LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944 ★ 1 · Oct 25, 2024
CVE-2022-0944 Remote Code Execution Exploit
-
toneillcodes/CVE-2022-0944 ★ 1 · Oct 13, 2024
PoC for RCE in SQLPad (CVE-2022-0944)
-
Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-0944 ★ 1 · Sep 10, 2024
-
NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944 ★ 0 · Mar 25, 2026
Historical material and unverified references. Research snapshot.
-
0xDTC/SQLPad-6.10.0-Exploit-CVE-2022-0944 ★ 0 · Oct 27, 2024
Refurbish
-
Philip-Otter/CVE-2022-0944_RCE_Automation ★ 0 · Sep 9, 2024
PoC code written for CVE-2022-0944 to make exploitation easier. Based on information found here: https://huntr.com/bounties/46630727-d923-4444-a421-537ecd63e7fb
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.