CVE-2022-3189

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL capable of changing the host parameter. The changed host parameter in the HTTP could point to another host that will send a request to the host or IP specified in the changed host parameter.

• CWE-918

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03Patch, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03Patch, Third Party Advisory, US Government Resource

Published

Dec 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31884Marval MSM v14.19.0.12476 has an Improper Access Control vul…6.5
• CVE-2022-31885Marval MSM v14.19.0.12476 is vulnerable to OS Command Inject…9.8
• CVE-2022-31886Marval MSM v14.19.0.12476 is vulnerable to Cross Site Reques…6.5
• CVE-2022-31887Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vul…9.8
• CVE-2022-31888Session Fixation vulnerability in in function login in class…8.8
• CVE-2022-31889Cross Site Scripting (XSS) vulnerability in audit/templates/…6.1
• CVE-2022-31890SQL Injection vulnerability in audit/class.audit.php in osTi…9.8
• CVE-2022-31897SourceCodester Zoo Management System 1.0 is vulnerable to Cr…6.1
• CVE-2022-31898gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214…6.8
• CVE-2022-3190Infinite loop in the F5 Ethernet Trailer protocol dissector …5.5
• CVE-2022-31901Buffer overflow in function Notepad_plus::addHotSpot in Note…6.5
• CVE-2022-31902Notepad++ v8.4.1 was discovered to contain a stack overflow …5.5