CVE-2022-34937

Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.

• CWE-352

• https://github.com/u5cms/u5cms/issues/51Exploit, Issue Tracking, Third Party Advisory
• https://github.com/u5cms/u5cms/issues/51Exploit, Issue Tracking, Third Party Advisory

Published

Aug 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34919The file upload wizard in Zengenti Contensis Classic before …9.8
• CVE-2022-3492A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2022-34924Lanling OA Landray Office Automation (OA) internal patch num…7.5
• CVE-2022-34927MilkyTracker v1.03.00 was discovered to contain a stack over…7.8
• CVE-2022-34928JFinal CMS v5.1.0 was discovered to contain a SQL injection …8.8
• CVE-2022-3493A vulnerability, which was classified as problematic, has be…5.4
• CVE-2022-3494The Complianz WordPress plugin before 6.3.4, and Complianz P…8.8
• CVE-2022-34943Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-34945Pharmacy Management System v1.0 was discovered to contain a …9.8
• CVE-2022-34946Pharmacy Management System v1.0 was discovered to contain a …9.8
• CVE-2022-34947Pharmacy Management System v1.0 was discovered to contain a …9.8
• CVE-2022-34948Pharmacy Management System v1.0 was discovered to contain a …9.8