VICIdial CVE-2022-34876 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-34876
• https://avd.aliyun.com/detail?id=AVD-2022-34876
• https://avd.aliyun.com/product?prod=vicidial&page=0
• https://www.cvedetails.com/cve/CVE-2022-34876/
• https://github.com/advisories/GHSA-vm9r-p8vp-v2fj
• https://sploitus.com/exploit?id=PACKETSTORM:181209

Related Vulnerabilities

• VICIdial /VERM/VERM_AJAX_functions.php SQL 注入漏洞（CVE-2024-8503）
• PoCCVE-2021-28854: VICIdial Sensitive Information Disclosure
• PoCCVE-2024-8503: VICIdial - SQL Injection
• VICIdial CVE-2022-34878 SQL注入漏洞
• VICIdial CVE-2022-34877 SQL注入漏洞
• VICIdial vicidial_mysqli_errors.txt 信息泄漏漏洞(CVE-2021-28854)
• VICIdial user_authorization-非授权命令执行