{"vulnerability": "CVE-2022-4335", "sightings": [{"uuid": "2a9ce1c7-e984-4c40-931a-89923176202a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43350", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43350\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.\n\ud83d\udccf Published: 2022-11-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T18:10:54.434Z\n\ud83d\udd17 References:\n1. https://github.com/Hujozay/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-2.md", "creation_timestamp": "2025-05-05T18:19:24.000000Z"}, {"uuid": "f317c0f3-5627-4c28-9038-611d65c4035b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4335", "type": "seen", "source": "https://t.me/cibsecurity/57057", "content": "\u203c CVE-2022-4335 \u203c\n\nA blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T20:39:40.000000Z"}, {"uuid": "906d0aa4-38c4-46ef-b8e0-9d08b61ac358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43355", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43355\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.\n\ud83d\udccf Published: 2022-11-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T21:01:47.650Z\n\ud83d\udd17 References:\n1. https://github.com/daytime888/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-3.md", "creation_timestamp": "2025-05-02T21:16:29.000000Z"}, {"uuid": "57355798-477e-4f06-9ae5-14c0bd1587fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43354", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14606", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43354\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.\n\ud83d\udccf Published: 2022-11-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T21:03:00.913Z\n\ud83d\udd17 References:\n1. https://github.com/daytime888/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-2.md", "creation_timestamp": "2025-05-02T21:16:28.000000Z"}, {"uuid": "d46e6987-bda5-4366-b354-da1321025285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43353", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14605", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43353\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.\n\ud83d\udccf Published: 2022-11-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T21:05:06.480Z\n\ud83d\udd17 References:\n1. https://github.com/daytime888/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/SQLi-1.md", "creation_timestamp": "2025-05-02T21:16:27.000000Z"}, {"uuid": "21da91a1-c0fe-479f-930c-a7ebd3695022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43351", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43351\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.\n\ud83d\udccf Published: 2022-11-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T18:12:14.310Z\n\ud83d\udd17 References:\n1. https://github.com/Hujozay/bug_report/blob/main/vendors/oretnom23/sanitization-management-system/delete-file-1.md", "creation_timestamp": "2025-05-05T18:19:22.000000Z"}, {"uuid": "3eef07cb-98c8-48fd-8372-644dcf3b8f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43353", "type": "seen", "source": "https://t.me/cibsecurity/52340", "content": "\u203c CVE-2022-43353 \u203c\n\nSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-01T06:13:30.000000Z"}, {"uuid": "cac3951c-4a5a-4930-8c5f-78ba5ce3bfaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43354", "type": "seen", "source": "https://t.me/cibsecurity/52336", "content": "\u203c CVE-2022-43354 \u203c\n\nSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-01T06:13:26.000000Z"}, {"uuid": "b051af2a-f109-48e3-b62b-bca15403e75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43357", "type": "seen", "source": "https://t.me/cibsecurity/69009", "content": "\u203c CVE-2022-43357 \u203c\n\nStack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:25:11.000000Z"}, {"uuid": "3c89e92f-1735-4966-a58e-5ae3611013b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43358", "type": "seen", "source": "https://t.me/cibsecurity/68973", "content": "\u203c CVE-2022-43358 \u203c\n\nStack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:18:20.000000Z"}, {"uuid": "3dbaf5b4-8509-42fe-8397-e41c75afa62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43350", "type": "seen", "source": "https://t.me/cibsecurity/52609", "content": "\u203c CVE-2022-43350 \u203c\n\nSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-07T18:34:36.000000Z"}, {"uuid": "98639868-f619-4797-b842-c23523f6f141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43355", "type": "seen", "source": "https://t.me/cibsecurity/52346", "content": "\u203c CVE-2022-43355 \u203c\n\nSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-01T06:13:42.000000Z"}, {"uuid": "3543ba00-dbe0-4f01-a072-b6a6888440e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43352", "type": "seen", "source": "https://t.me/cibsecurity/52595", "content": "\u203c CVE-2022-43352 \u203c\n\nSanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-07T18:34:22.000000Z"}, {"uuid": "c295391a-5993-425b-94aa-5edf248581f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-43351", "type": "seen", "source": "https://t.me/cibsecurity/52605", "content": "\u203c CVE-2022-43351 \u203c\n\nSanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-07T18:34:32.000000Z"}]}