CVE-2022-3801

A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability.

• CWE-707
• CWE-89

• https://github.com/IBAX-io/go-ibax/issues/2062Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.212637Third Party Advisory
• https://github.com/IBAX-io/go-ibax/issues/2062Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.212637Third Party Advisory

Published

Nov 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38004Windows Fax Service Remote Code Execution Vulnerability7.8
• CVE-2022-38005Windows Print Spooler Elevation of Privilege Vulnerability7.8
• CVE-2022-38006Windows Graphics Component Information Disclosure Vulnerabil…6.5
• CVE-2022-38007Azure Guest Configuration and Azure Arc-enabled servers Elev…7.8
• CVE-2022-38008Microsoft SharePoint Server Remote Code Execution Vulnerabil…8.8
• CVE-2022-38009Microsoft SharePoint Server Remote Code Execution Vulnerabil…8.8
• CVE-2022-38010Microsoft Office Visio Remote Code Execution Vulnerability7.8
• CVE-2022-38011Raw Image Extension Remote Code Execution Vulnerability7.3
• CVE-2022-38012Microsoft Edge (Chromium-based) Remote Code Execution Vulner…7.7
• CVE-2022-38013.NET Core and Visual Studio Denial of Service Vulnerability7.5
• CVE-2022-38014Windows Subsystem for Linux (WSL2) Kernel Elevation of Privi…7
• CVE-2022-38015Windows Hyper-V Denial of Service Vulnerability6.5