CVE-2022-31487: SQL Injection

Published May 23, 2022

Updated

Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chartcontent/master.php symbol SQL injection.

Affected Software

2 affected components

Inoutscripts Blockchain Altexchanger=1.2.1

Inoutscripts Blockchain Fiatexchanger=2.2.1

Event History

May 23, 2022

CVE Published

via MITRE·07:45 PM

Data Sourced

via MITRE·07:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2022-31487?

CVE-2022-31487 has a high severity level due to its potential for SQL injection attacks that can lead to data compromise.

How do I fix CVE-2022-31487?

To fix CVE-2022-31487, upgrade to a patched version of Inout Blockchain AltExchanger or Inout Blockchain FiatExchanger as recommended by the vendor.

What are the affected versions of CVE-2022-31487?

CVE-2022-31487 affects Inout Blockchain AltExchanger version 1.2.1 and Inout Blockchain FiatExchanger version 2.2.1.

What kind of attack can exploit CVE-2022-31487?

CVE-2022-31487 can be exploited through SQL injection, allowing attackers to manipulate database queries.

How can I determine if my system is vulnerable to CVE-2022-31487?

You can determine if your system is vulnerable to CVE-2022-31487 by checking if you are using the affected versions and evaluating your code for SQL injection points.