Unscored CVE-2022-23986 EUVD-2022-28901GHSA-x6pj-57g9-3f6f

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the d…

Published Feb 24, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Dojin Club MICMNIS Product: phpUploader

Description

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Dojin Club MICMNIS	phpUploader	v1.2 and earlier	—

References

https://github.com/shimosyan/phpUploader/releases/tag/v1.2.1
https://jvn.jp/en/jp/JVN00095004/index.html