Critical severity9.8NVD Advisory· Published Feb 23, 2023· Updated Jun 17, 2026

CVE-2022-2504

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Software SDD-Baro allows SQL Injection.

This issue affects SDD-Baro: before 2.8.432.

Affected products

Sdd Baro Project/Sdd Baro
cpe:2.3:a:sdd-baro_project:sdd-baro:*:*:*:*:*:*:*:*
Range: <2.8.432
Sdd Computer Software/Sdd Barollm-fuzzy2 versions
<2.8.432+ 1 more
- (no CPE)range: <2.8.432
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-23-0107nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0107nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000