AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-26959

CRITICAL · CVSS 10 EPSS 0.80% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-26959
Severity
CRITICAL
CVSS
10
EPSS
0.80%

Original NVD Description

There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter of the login.jsp page in the /northstar/iphone/ directory. Exploitation of the SQL injection vulnerabilities allows full access to the database which contains critical data for organization’s that make full use of the software suite.

Related CVEs

Other vulnerabilities affecting the same vendor(s)