CVE-2022-31787

IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO

• CWE-89

• https://gist.github.com/RNPG/ef10c0acceb650d43625a77d3472dd84Exploit, Third Party Advisory
• https://gist.github.com/This-is-Neo/c91e1a0ed5d40fbcf0dada43ea1d7479Exploit, Third Party Advisory
• https://gist.github.com/RNPG/ef10c0acceb650d43625a77d3472dd84Exploit, Third Party Advisory
• https://gist.github.com/This-is-Neo/c91e1a0ed5d40fbcf0dada43ea1d7479Exploit, Third Party Advisory

Published

Jun 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31780Improper Input Validation vulnerability in HTTP/2 frame hand…7.5
• CVE-2022-31781Apache Tapestry up to version 5.8.1 is vulnerable to Regular…7.5
• CVE-2022-31782ftbench.c in FreeType Demo Programs through 2.12.1 has a hea…7.8
• CVE-2022-31783Liblouis 3.21.0 has an out-of-bounds write in compileRule in…5.5
• CVE-2022-31784A vulnerability in the management interface of MiVoice Busin…9.8
• CVE-2022-31786IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via…6.1
• CVE-2022-31788IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/C…9.8
• CVE-2022-31789An integer overflow in WatchGuard Firebox and XTM appliances…9.8
• CVE-2022-3179Weak Password Requirements in GitHub repository ikus060/rdif…8.8
• CVE-2022-31790WatchGuard Firebox and XTM appliances allow an unauthenticat…7.5
• CVE-2022-31791WatchGuard Firebox and XTM appliances allow a local attacker…7.8
• CVE-2022-31792A stored cross-site scripting (XSS) vulnerability exists in …5.4