What’s Vulnerable › Vulnerabilities

CVE-2022-4454: m0ver bible-online Search search.java query sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-13 · updated 2026-06-17
• Weakness: CWE-707

Description

A vulnerability, which was classified as critical, has been found in m0ver bible-online. Affected by this issue is the function query of the file src/main/java/custom/application/search.java of the component Search Handler. The manipulation leads to sql injection. The name of the patch is 6ef0aabfb2d4ccd53fcaa9707781303af357410e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215444.

Affected products

• m0ver bible-online: before 2022-10-02 — fixed in 2022-10-02

How to fix

Upgrade to a fixed version: m0ver bible-online 2022-10-02. Check the vendor advisory for mitigations.

References

• https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e
• https://vuldb.com/?id.215444
• https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e
• https://vuldb.com/?id.215444

Get alerted when CVE-2022-4454 or the next vulnerability affects your stack