CVE-2022-21666

Useful Simple Open-Source CMS (USOC) is a content management system (CMS) for programmers. Versions prior to Pb2.4Bfx3 allowed Sql injection in usersearch.php only for users with administrative privileges. Users should replace the file `admin/pages/useredit.php` with a newer version. USOC version Pb2.4Bfx3 contains a fixed version of `admin/pages/useredit.php`.

• CWE-89
• CWE-89

• https://github.com/Aaron-Junker/USOC/commit/c331d26aaab41a7e9e8c1c1a990132dca9d01e10Patch, Third Party Advisory
• https://github.com/Aaron-Junker/USOC/releases/tag/Pb2.4Bfx3Release Notes, Third Party Advisory
• https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-557p-hhpc-4wrxThird Party Advisory
• https://github.com/Aaron-Junker/USOC/commit/c331d26aaab41a7e9e8c1c1a990132dca9d01e10Patch, Third Party Advisory
• https://github.com/Aaron-Junker/USOC/releases/tag/Pb2.4Bfx3Release Notes, Third Party Advisory
• https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-557p-hhpc-4wrxThird Party Advisory

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2166Improper Restriction of Excessive Authentication Attempts in…9.8
• CVE-2022-21660Gin-vue-admin is a backstage management system based on vue …8.1
• CVE-2022-21661WordPress is a free and open-source content management syste…7.5
• CVE-2022-21662WordPress is a free and open-source content management syste…5.4
• CVE-2022-21663WordPress is a free and open-source content management syste…7.2
• CVE-2022-21664WordPress is a free and open-source content management syste…8.8
• CVE-2022-21667soketi is an open-source WebSockets server. There is an unha…7.5
• CVE-2022-21668pipenv is a Python development workflow tool. Starting with …8.6
• CVE-2022-21669PuddingBot is a group management bot. In version 0.0.6-b9336…7.5
• CVE-2022-2167The Newspaper WordPress theme before 12 does not sanitise a …6.1
• CVE-2022-21670markdown-it is a Markdown parser. Prior to version 1.3.2, sp…5.3
• CVE-2022-21671@replit/crosis is a JavaScript client that speaks Replit's c…6.5