CVE-2022-2550

OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5.

• CWE-78

• https://github.com/hestiacp/hestiacp/commit/3d4c309cf138943cfd1e71ae51556406987aa4bfPatch, Third Party Advisory
• https://huntr.dev/bounties/6ab4384d-bcbe-4d98-bf67-35c3535fc5c7Exploit, Third Party Advisory
• https://github.com/hestiacp/hestiacp/commit/3d4c309cf138943cfd1e71ae51556406987aa4bfPatch, Third Party Advisory
• https://huntr.dev/bounties/6ab4384d-bcbe-4d98-bf67-35c3535fc5c7Exploit, Third Party Advisory

Published

Jul 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25492HMS v1.0 was discovered to contain a SQL injection vulnerabi…9.8
• CVE-2022-25493HMS v1.0 was discovered to contain a reflected cross-site sc…6.1
• CVE-2022-25494Online Banking System v1.0 was discovered to contain a SQL i…9.8
• CVE-2022-25495The component /jquery_file_upload/server/php/index.php of Cu…9.8
• CVE-2022-25497CuppaCMS v1.0 was discovered to contain an arbitrary file re…5.3
• CVE-2022-25498CuppaCMS v1.0 was discovered to contain a remote code execut…9.8
• CVE-2022-25505Taocms v3.0.2 was discovered to contain a SQL injection vuln…9.8
• CVE-2022-25506FreeTAKServer-UI v1.9.8 was discovered to contain a SQL inje…6.5
• CVE-2022-25507FreeTAKServer-UI v1.9.8 was discovered to contain a stored c…5.4
• CVE-2022-25508An access control issue in the component /ManageRoute/postRo…7.5
• CVE-2022-2551The Duplicator WordPress plugin before 1.4.7 discloses the u…7.5
• CVE-2022-25510FreeTAKServer 1.9.8 contains a hardcoded Flask secret key wh…8.8