high8.8
CVE-2022-38118
OAKlouds Portal website’s Meeting Room has insufficient validation for user input.
Impact
OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hgiga | Oaklouds Portal | from 2.0 through 2.0-163 from 3.0 through 3.0-163 |