T-Soft E-Commerce CVE-2022-28132SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-28132
• https://github.com/advisories/GHSA-q2xc-6c48-r5px
• https://www.exploit-db.com/exploits/50939
• https://www.tenable.com/cve/CVE-2022-28132/cpes
• https://github.com/trickest/cve/blob/main/2022/CVE-2022-28132.md

Related Vulnerabilities

• PoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL Injection
• PoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
• PoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity Switch
• PoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation
• PoCCVE-2026-3891: Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload
• Stripe Payment Plugin for WooCommerce /wc-api/WT_Stripe/ SQL 注入漏洞（CVE-2024-0705）
• WordPress TI WooCommerce Wishlist /wp-json/wc/v3/wishlist/get_products SQL 注入漏洞（CVE-2024-43917）
• PoCCVE-2025-13339: Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
• PoCCVE-2025-13773: WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution
• PoCCVE-2026-10580: Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover
• PoCCVE-2026-49777: WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE
• WordPress WooCommerce OrderConvo 插件 /wp-json/wooconvo/v1/download-file 文件读取漏洞（CVE-2025-10162）
• PoCCVE-2025-47577: TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload