CVE-2022-21666

HOCH 7.2CVE-2022-21666 · Published 10/01/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-21666 ist eine Schwachstelle (HOCH (CVSS 7.2)) in useful simple open-source cms (useful simple open-source cms project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 69.1% aller Schwachstellen.
Abhilfe: auf pb2.4bfx3 oder neuer aktualisieren.

Package	Affected versions	Patched versions
useful simple open-source cms useful_simple_open-source_cms_project	`< pb2.4bfx3`	`pb2.4bfx3`

Description

Useful Simple Open-Source CMS (USOC) is a content management system (CMS) for programmers. Versions prior to Pb2.4Bfx3 allowed Sql injection in usersearch.php only for users with administrative privileges. Users should replace the file `admin/pages/useredit.php` with a newer version. USOC version Pb2.4Bfx3 contains a fixed version of `admin/pages/useredit.php`.

References

Aaron-Junker/USOC commit c331d26 · Patch
Aaron-Junker/USOC release Pb2.4Bfx3 · Release Notes
Aaron-Junker/USOC security advisory · Third Party Advisory

Weitere Schwachstellen in useful simple open-source cms

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free