← Database

CVE-2022-27472

CRITICAL CVSS: 9.8 Published: 2022-04-12 Modified: 2026-06-17

Description

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.

Affected Platforms

Roothub Project Roothub

Weakness Type

CWE-89

References