CVE-2022-1248

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.

• CWE-287
• CWE-306

• http://packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.196550Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.196550Exploit, Third Party Advisory

Published

Apr 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1242Apport can be tricked into connecting to arbitrary sockets a…7.8
• CVE-2022-1243CRHTLF can lead to invalid protocol extraction potentially l…6.1
• CVE-2022-1244heap-buffer-overflow in GitHub repository radareorg/radare2 …5.5
• CVE-2022-1245A privilege escalation flaw was found in the token exchange …9.8
• CVE-2022-1246Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-1247An issue found in linux-kernel that leads to a race conditio…7
• CVE-2022-1249A NULL pointer dereference flaw was found in pesign's cms_se…3.3
• CVE-2022-1250The LifterLMS PayPal WordPress plugin before 1.4.0 does not …6.1
• CVE-2022-1251The Ask me WordPress theme before 6.8.4 does not perform non…4.3
• CVE-2022-1252Use of a Broken or Risky Cryptographic Algorithm in GitHub r…9.1
• CVE-2022-1253Heap-based Buffer Overflow in GitHub repository strukturag/l…9.8
• CVE-2022-1254A URL redirection vulnerability in Skyhigh SWG in main relea…6.1