CVE-2022-34324: SQL Injection

Published Jan 1, 2023

Updated

Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.

Affected Software

1 affected component

Sage Sage XRT Business Exchange=12.4.302

Event History

Jan 1, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2022-34324?

CVE-2022-34324 is a vulnerability in Sage XRT Business Exchange 12.4.302 that allows an authenticated attacker to inject malicious data in SQL queries.

How severe is CVE-2022-34324?

CVE-2022-34324 has a severity rating of 8.8, which is considered high.

Which software versions are affected by CVE-2022-34324?

CVE-2022-34324 affects Sage XRT Business Exchange version 12.4.302.

How can an attacker exploit CVE-2022-34324?

An authenticated attacker can exploit CVE-2022-34324 by using SQL injection techniques to inject malicious data into SQL queries in Sage XRT Business Exchange.

Are there any references available for CVE-2022-34324?

Yes, you can find more information about CVE-2022-34324 at the following reference: [link](https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf).