Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-0944— Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

Quick assessment

Affected
sqlpad sqlpad/sqlpad
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

sqlpad是一个基于 Web 的 SQL 编辑器。 sqlpad 存在安全漏洞，目前暂无该漏洞信息，请随时关注CNNVD或厂商公告。

AI Predicted 9.8 Difficulty: Easy EPSS 8.67% · P95

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-0944

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad
Source: CVE Program / CVE List V5
Vulnerability Description
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1336
Source: CVE Program / CVE List V5
Vulnerability Title
sqlpad 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
sqlpad是一个基于 Web 的 SQL 编辑器。 sqlpad 存在安全漏洞，目前暂无该漏洞信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
sqlpad sqlpad/sqlpad unspecified ~ 6.10.1 -

II. Public POCs for CVE-2022-0944

# POC Description Source Link Shenlong Link
1 A proof of concept exploit for SQLPad RCE (CVE-2022-0944). https://github.com/shhrew/CVE-2022-0944 POC Details
2 PoC code written for CVE-2022-0944 to make exploitation easier. Based on information found here: https://huntr.com/bounties/46630727-d923-4444-a421-537ecd63e7fb https://github.com/Philip-Otter/CVE-2022-0944_RCE_Automation POC Details
3 SQLPad - Template injection https://github.com/FlojBoj/CVE-2022-0944 POC Details
4 None https://github.com/0xRoqeeb/sqlpad-rce-exploit-CVE-2022-0944 POC Details
5 None https://github.com/Robocopsita/CVE-2022-0944_RCE_POC POC Details
6 PoC for RCE in SQLPad (CVE-2022-0944) https://github.com/toneillcodes/poc-cve-2022-0944 POC Details
7 PoC for RCE in SQLPad (CVE-2022-0944) https://github.com/toneillcodes/CVE-2022-0944 POC Details
8 CVE-2022-0944 Remote Code Execution Exploit https://github.com/LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944 POC Details
9 Refurbish https://github.com/TanveerS1ngh/SQLPad-6.10.0-Exploit-CVE-2022-0944 POC Details
10 Refurbish https://github.com/0xDTC/SQLPad-6.10.0-Exploit-CVE-2022-0944 POC Details
11 None https://github.com/Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-0944 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-0944

请登录查看更多情报信息。

Patches & Fixes for CVE-2022-0944 (1)

Vendor Advisories for CVE-2022-0944 (1)

IV. Related Vulnerabilities

Same weakness: CWE-1336

V. Comments for CVE-2022-0944

No comments yet

Leave a comment