.. / CVE-2022-1883

Exploit for Terraboard <2.2.0 - SQL Injection (CVE-2022-1883)

Description:

Terraboard prior to 2.2.0 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Nuclei Template

View the template here CVE-2022-1883.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1883.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2022-1883
https://github.com/ARPSyndicate/kenzer-templates
https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7/
https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc
https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7