CVE-2022-0944
Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad
HIGH 7.2EPSS 8.7%
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
- Affected
- sqlpad · sqlpad/sqlpad
- CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v3.0 HUNTR
- 9.1 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 8.67% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2022-03-15
- Updated
- 2024-08-02
Proof-of-concept exploits (12)
- https://huntr.dev/bounties/46630727-d923-4444-a421-537ecd63e7fb
- 0xDTC/SQLPad-6.10.0-Exploit-CVE-2022-09440★ · 2025-01-11
- 0xRoqeeb/sqlpad-rce-exploit-CVE-2022-09449★ · 2024-09-10
- Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-09441★ · 2025-04-29
- Artemisxxx37/cve-2024-09441★ · 2025-04-29
- FlojBoj/CVE-2022-09445★ · 2024-09-10
- LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-09441★ · 2025-08-16
- Philip-Otter/CVE-2022-0944_RCE_Automation0★ · 2024-09-10
- Robocopsita/CVE-2022-0944_RCE_POC2★ · 2024-09-13
- shhrew/CVE-2022-09447★ · 2024-09-08
- toneillcodes/CVE-2022-09441★ · 2024-10-14
- NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-09440★ · 2026-05-06