CVE-2022-24223

CRITICALNuclei

AtomCMS v2.0 - SQLi

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-24223 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBAtomCMS v2.0 - SQLiExploitDB exploitby Luca CuzzolinNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALAtom CMS v2.0 - SQL InjectionCVSS 9.8

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.

Remediation

Fixed in version Atom CMS v2.1

WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicvecve2022packetstormsqliatomcmsthedigitalcraftvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:thedigitalcraft:atomcms:2.0:*:*:*:*:*:*:*
https://packetstormsecurity.com/files/165922/Atom-CMS-2.0-SQL-Injection.html https://github.com/thedigicraft/Atom.CMS/issues/255 https://nvd.nist.gov/vuln/detail/CVE-2022-24223 https://github.com/ARPSyndicate/cvemon https://github.com/Enes4xd/Enes4xd

Source: ProjectDiscovery

References

3