CVE-2022-25323

ZEROF Web Server 2.0 allows /admin.back XSS.

• CWE-79

• https://awillix.ruThird Party Advisory
• https://github.com/awillix/research/blob/main/cve/CVE-2022-25323.mdExploit, Third Party Advisory
• https://awillix.ruThird Party Advisory
• https://github.com/awillix/research/blob/main/cve/CVE-2022-25323.mdExploit, Third Party Advisory

Published

Feb 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25318An issue was discovered in Cerebrate through 1.4. An incorre…4.3
• CVE-2022-25319An issue was discovered in Cerebrate through 1.4. Endpoints …5.3
• CVE-2022-2532The Feed Them Social WordPress plugin before 3.0.1 does not …6.1
• CVE-2022-25320An issue was discovered in Cerebrate through 1.4. Username e…5.3
• CVE-2022-25321An issue was discovered in Cerebrate through 1.4. XSS could …6.1
• CVE-2022-25322ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.9.8
• CVE-2022-25324All versions of package bignum are vulnerable to Denial of S…7.5
• CVE-2022-25325Use after free vulnerability in CX-Programmer v9.76.1 and ea…7.8
• CVE-2022-25326fscrypt through v0.3.2 creates a world-writable directory by…5.5
• CVE-2022-25327The PAM module for fscrypt doesn't adequately validate fscry…5.5
• CVE-2022-25328The bash_completion script for fscrypt allows injection of c…7.3
• CVE-2022-25329Trend Micro ServerProtect 6.0/5.8 Information Server uses a …9.8