{"vulnerability": "CVE-2022-2852", "sightings": [{"uuid": "dc6035be-6c8b-4cb9-aa2e-7bd65e8ac123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28524", "type": "seen", "source": "https://t.me/cibsecurity/41468", "content": "\u203c CVE-2022-28524 \u203c\n\nED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T00:37:37.000000Z"}, {"uuid": "68f03881-fd28-4a26-8404-26f72bbb0006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28527", "type": "seen", "source": "https://t.me/cibsecurity/41467", "content": "\u203c CVE-2022-28527 \u203c\n\ndhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T00:37:36.000000Z"}, {"uuid": "38fa917a-22dd-4965-bc12-3e2d182ec21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28523", "type": "seen", "source": "https://t.me/cibsecurity/41460", "content": "\u203c CVE-2022-28523 \u203c\n\nHongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T00:37:24.000000Z"}, {"uuid": "07816050-87f5-4a5d-ace1-d3efe9402296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28522", "type": "seen", "source": "https://t.me/cibsecurity/41459", "content": "\u203c CVE-2022-28522 \u203c\n\nZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=message&a=add.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T00:37:23.000000Z"}, {"uuid": "78aaabc3-36ac-4dd1-9411-89b745c864f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28521", "type": "seen", "source": "https://t.me/cibsecurity/41458", "content": "\u203c CVE-2022-28521 \u203c\n\nZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T00:37:21.000000Z"}, {"uuid": "6e9450b0-6c24-4d5c-9c61-47fb46e58c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28525", "type": "seen", "source": "https://t.me/cibsecurity/41457", "content": "\u203c CVE-2022-28525 \u203c\n\nED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T00:37:20.000000Z"}, {"uuid": "832fcb3f-ba18-4640-89a3-27e4f3a9fdd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28528", "type": "seen", "source": "https://t.me/cibsecurity/41456", "content": "\u203c CVE-2022-28528 \u203c\n\nbloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-27T09:06:54.000000Z"}]}