critical9.8
CVE-2022-23865
Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx.
Impact
Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx. To exploit this vulnerability, an attacker must inject '"> on the thes1 parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wecul | Nyron | Version 1.0 |