CVE-2022-23865

Name of the Vulnerable Software and Affected Versions Nyron version 1.0

Description The issue is a SQL injection vulnerability that can be exploited through the Nyron/Library/Catalog/winlibsrch.aspx endpoint by injecting '"> on the thes1 parameter.

Recommendations For Nyron version 1.0, consider restricting access to the Nyron/Library/Catalog/winlibsrch.aspx endpoint until a patch is available. As a temporary workaround, avoid using the thes1 parameter in the affected endpoint to minimize the risk of exploitation.