← Database

CVE-2022-46763

HIGH CVSS: 8.8 Published: 2022-12-27 Modified: 2026-06-17

Description

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.

Affected Platforms

Microsoft WindowsTrueconf Server

Weakness Type

CWE-89, CWE-89, CWE-89

References