CVE-2022-37333

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.

• CWE-89

• https://exment.net/docs/#/release_note?id=v503-20220817Patch, Release Notes, Vendor Advisory
• https://exment.net/docs/#/weakness/20220817Mitigation, Patch, Vendor Advisory
• https://jvn.jp/en/jp/JVN46239102/index.htmlThird Party Advisory
• https://exment.net/docs/#/release_note?id=v503-20220817Patch, Release Notes, Vendor Advisory
• https://exment.net/docs/#/weakness/20220817Mitigation, Patch, Vendor Advisory
• https://jvn.jp/en/jp/JVN46239102/index.htmlThird Party Advisory

Published

Aug 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37328Authenticated (author+) Stored Cross-Site Scripting (XSS) vu…5.4
• CVE-2022-37329Uncontrolled search path in some Intel(R) Quartus(R) Prime P…7.3
• CVE-2022-3733A vulnerability was found in SourceCodester Web-Based Studen…8.8
• CVE-2022-37330Authenticated (contributor+) Stored Cross-Site Scripting (XS…5.4
• CVE-2022-37331An out-of-bounds write vulnerability exists in the Gaussian …7.8
• CVE-2022-37332A use-after-free vulnerability exists in the JavaScript engi…7.8
• CVE-2022-37334Improper initialization in BIOS firmware for some Intel(R) N…7.8
• CVE-2022-37335Authenticated (author+) Stored Cross-Site Scripting (XSS) vu…4.8
• CVE-2022-37336Improper input validation in BIOS firmware for some Intel(R)…6.7
• CVE-2022-37337A command execution vulnerability exists in the access contr…8.8
• CVE-2022-37338Multiple Authenticated (contributor+) Stored Cross-Site Scri…5.4
• CVE-2022-37339Authenticated (contributor+) Stored Cross-Site Scripting (XS…5.4