medium6.1Public exploit code
CVE-2022-47870
A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote attackers to inject arbitrary web…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS)2023-04-03 · webapps · multiple
Impact
A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote attackers to inject arbitrary web Script or HTML via the returnUrl parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Red-Gate | Sql Monitor | Version 12.1.31.893 |