CVE-2022-29704

CriticalCVSS 9.8

Published: 02/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.14%

63th percentile - higher than 63% of all known CVEs

Summary

A SQL injection vulnerability was discovered in BrowsBox CMS version 4.0. It allows an attacker to manipulate database queries through improperly handled input data.

Risk Assessment

The risk involves unauthorized access to data, its modification or deletion, potentially compromising the confidentiality and integrity of the system.

Recommendation

Immediately update BrowsBox CMS to the latest version that includes a fix for the SQL injection vulnerability. Additionally, implement input validation and use parameterized queries.

Original NVD description (English source)

BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability.