Critical severity9.8NVD Advisory· Published Nov 3, 2022· Updated Jun 17, 2026
CVE-2022-42744
CVE-2022-42744
Description
CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not correctly validate the entriesPerPage parameter against SQLi attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- CandidATS/CandidATSdescription
Patches
Vulnerability mechanics
References
2- fluidattacks.com/advisories/mohawke/nvdExploitThird Party Advisory
- candidats.netnvdProduct
News mentions
0No linked articles in our index yet.