CVE-2022-3731

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413 was assigned to this vulnerability.

• CWE-707

• https://vuldb.com/?id.212413Third Party Advisory
• https://vuldb.com/?id.212413Third Party Advisory

Published

Oct 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37304Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-37305The Remote Keyless Entry (RKE) receiving unit on certain Hon…6.4
• CVE-2022-37306OX App Suite before 7.10.6-rev30 allows XSS via an upsell tr…6.1
• CVE-2022-37307OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a…6.1
• CVE-2022-37308OX App Suite through 7.10.6 allows XSS via HTML in text/plai…6.1
• CVE-2022-37309OX App Suite through 7.10.6 allows XSS via script code withi…6.1
• CVE-2022-37310OX App Suite through 7.10.6 allows XSS via a malicious capab…6.1
• CVE-2022-37311OX App Suite through 7.10.6 has Uncontrolled Resource Consum…5.3
• CVE-2022-37312OX App Suite through 7.10.6 has Uncontrolled Resource Consum…5.3
• CVE-2022-37313OX App Suite through 7.10.6 allows SSRF because the anti-SSR…5.3
• CVE-2022-37315graphql-go (aka GraphQL for Go) through 0.8.0 has infinite r…7.5
• CVE-2022-37316Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an im…6.5