← Database

CVE-2022-45564

CRITICAL CVSS: 9.8 Published: 2023-02-21 Modified: 2026-06-17

Description

SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet.

Affected Platforms

Znfit Home Improvement Erp Management System

Weakness Type

CWE-89, CWE-89

References