{"vulnerability": "cve-2022-2460", "sightings": [{"uuid": "addbc480-cd99-4165-b7fe-1c96ea495c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24608", "type": "seen", "source": "https://t.me/cibsecurity/38707", "content": "\u203c CVE-2022-24608 \u203c\n\nLuocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:23:16.000000Z"}, {"uuid": "e90a0f2c-fe4d-4c74-ae18-347498ef88aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24607", "type": "seen", "source": "https://t.me/cibsecurity/38725", "content": "\u203c CVE-2022-24607 \u203c\n\nLuocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:26:16.000000Z"}, {"uuid": "a9f6672d-02fa-4504-a424-5f6725a6d00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24609", "type": "seen", "source": "https://t.me/cibsecurity/38722", "content": "\u203c CVE-2022-24609 \u203c\n\nLuocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:26:12.000000Z"}, {"uuid": "092e8113-4e6d-4df1-9b08-e45b33018dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24605", "type": "seen", "source": "https://t.me/cibsecurity/38713", "content": "\u203c CVE-2022-24605 \u203c\n\nLuocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:25:58.000000Z"}, {"uuid": "e0e14fe5-3970-467f-b31b-51a830cac4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24601", "type": "seen", "source": "https://t.me/cibsecurity/38688", "content": "\u203c CVE-2022-24601 \u203c\n\nLuocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:19:21.000000Z"}, {"uuid": "dd9244a3-15b6-418c-9184-e3d3f4fac4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24606", "type": "seen", "source": "https://t.me/cibsecurity/38679", "content": "\u203c CVE-2022-24606 \u203c\n\nLuocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:19:07.000000Z"}]}