CVE-2022-23380

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.

• CWE-89

• https://github.com/taogogo/taocms/issues/16Exploit, Issue Tracking, Third Party Advisory
• https://github.com/taogogo/taocms/issues/16Exploit, Issue Tracking, Third Party Advisory

Published

Mar 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23375WikiDocs version 0.1.18 has an authenticated remote code exe…8.8
• CVE-2022-23376WikiDocs version 0.1.18 has multiple reflected XSS vulnerabi…6.1
• CVE-2022-23377Archeevo below 5.0 is affected by local file inclusion throu…7.5
• CVE-2022-23378A Cross-Site Scripting (XSS) vulnerability exists within the…5.4
• CVE-2022-23379Emlog v6.0 was discovered to contain a SQL injection vulnera…9.8
• CVE-2022-2338Softing Secure Integration Server V1.22 is vulnerable to aut…5.3
• CVE-2022-23382Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8…8.1
• CVE-2022-23383YzmCMS v6.3 is affected by broken access control. Without lo…9.1
• CVE-2022-23384YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF)…8.8
• CVE-2022-23387An issue was discovered in taocms 3.0.2. This is a SQL blind…7.5
• CVE-2022-23389PublicCMS v4.0 was discovered to contain a remote code execu…9.8
• CVE-2022-2339With this SSRF vulnerability, an attacker can reach internal…7.5