CVE-2022-44290

CriticalCVSS 9.8

Published: 02/12/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.62%

88th percentile - higher than 88% of all known CVEs

Summary

A SQL injection vulnerability was discovered in webTareas 2.4p5 in the deleteapprovalstages.php file via the id parameter. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk involves potential theft, modification, or deletion of database data, leading to a breach of confidentiality and integrity of organizational information.

Recommendation

Immediately update webTareas to the latest patched version and implement parameterized SQL queries in the application code.

Original NVD description (English source)

webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.