Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2022-46908
Description:SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.
Test IDs: 1.3.6.1.4.1.25623.1.1.4.2023.1295.1   1.3.6.1.4.1.25623.1.1.2.2023.1578   1.3.6.1.4.1.25623.1.1.2.2023.1588   1.3.6.1.4.1.25623.1.1.4.2022.4603.1   1.3.6.1.4.1.25623.1.1.2.2023.2104   1.3.6.1.4.1.25623.1.0.126250   1.3.6.1.4.1.25623.1.1.10.2023.0094   1.3.6.1.4.1.25623.1.1.2.2023.2052   1.3.6.1.4.1.25623.1.1.4.2023.2668.1   1.3.6.1.4.1.25623.1.1.4.2022.4628.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-46908
https://security.gentoo.org/glsa/202311-03
https://news.ycombinator.com/item?id=33948588
https://sqlite.org/forum/forumpost/07beac8056151b2f
https://sqlite.org/src/info/cefc032473ac5ad2




© 1998-2025 E-Soft Inc. All rights reserved.