Kliqqi-CMS v2.0.2 SQL注入漏洞(CVE-2022-34956)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-34956
• https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/261
• https://github.com/advisories/GHSA-jh65-gmw3-hp3h
• https://cve.imfht.com/detail/CVE-2022-34956
• https://access.redhat.com/security/cve/cve-2022-34956
• https://devhub.checkmarx.com/cve-details/cve-2022-34956/
• https://www.scaprepo.com/control.jsp?search=CVE-2022-34956&command=relation&relationId=CVE-2022-34956
• https://cve.imfht.com/detail/CVE-2022-34956?lang=en

Related Vulnerabilities

• PoCCVE-2026-62382: PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass
• PoCCVE-2026-34976: Dgraph <=v25.3.0 - Admin Mutation Missing Authorization
• 信呼oa v2.7.6 api.php downimgnew 接口任意服务端请求伪造漏洞
• 安科瑞EMS企业微电网能效管理平台 /SubstationWEBV2/main/appDownload 文件读取漏洞
• Progress Kemp LoadMaster /accessv2 命令执行漏洞（CVE-2026-8037）
• Hoverfly /api/v2/ws/logs 信息泄露漏洞
• Langflow /api/v2/files 文件上传漏洞（CVE-2026-5027）
• Gitea /v2/_catalog 未授权访问漏洞（CVE-2026-27771）
• Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞（CVE-2026-10520）
• Ivanti EPMM /mifs/rs/api/v2/featureusage 命令执行漏洞（CVE-2025-4427）
• WordPress Burst Statistics /wp-json/wp/v2/users/me 权限绕过漏洞（CVE-2026-8181）
• WordPress Stop User Enumeration插件 /wp/v2/users 权限绕过漏洞（CVE-2025-4302）
• 心理云CT系统V2.0存在任意文件上传