CVE-2022-23873

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user_firstname' parameter.

• CWE-89

• https://github.com/truonghuuphuc/CVEThird Party Advisory
• https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-23873.pdfExploit, Third Party Advisory
• https://github.com/truonghuuphuc/CVEThird Party Advisory
• https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-23873.pdfExploit, Third Party Advisory

Published

Feb 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23865Nyron 1.0 is affected by a SQL injection vulnerability throu…9.8
• CVE-2022-23868RuoYi v4.7.2 contains a CSV injection vulnerability through …7.8
• CVE-2022-23869In RuoYi v4.7.2 through the WebUI, user test1 does not have …6.5
• CVE-2022-2387The Easy Digital Downloads WordPress plugin before 3.0 does …4.3
• CVE-2022-23871Multiple cross-site scripting (XSS) vulnerabilities in the c…5.4
• CVE-2022-23872Emlog pro v1.1.1 was discovered to contain a stored cross-si…4.8
• CVE-2022-23878seacms V11.5 is affected by an arbitrary code execution vuln…9.8
• CVE-2022-2388The WP Coder WordPress plugin before 2.5.3 does not have CSR…6.5
• CVE-2022-23880An arbitrary file upload vulnerability in the File Managemen…9.8
• CVE-2022-23881ZZZCMS zzzphp v2.1.0 was discovered to contain a remote comm…9.8
• CVE-2022-23882TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Co…9.8
• CVE-2022-23884Mojang Bedrock Dedicated Server 1.18.2 is affected by an int…9.8