← Database

CVE-2022-36276

CRITICAL CVSS: 9.9 Published: 2023-10-04 Modified: 2026-06-17

Description

TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.

Affected Platforms

Tcman Gim

Weakness Type

CWE-89, CWE-89

References