CVE-2022-3770

A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /index/user/upload_img.html. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212500.

• CWE-266

• https://github.com/swzaq/swzaqExploit, Third Party Advisory
• https://vuldb.com/?id.212500Permissions Required, Third Party Advisory
• https://github.com/swzaq/swzaqExploit, Third Party Advisory
• https://vuldb.com/?id.212500Permissions Required, Third Party Advisory

Published

Oct 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3767Missing validation in DAST analyzer affecting all versions f…6.5
• CVE-2022-37679Miniblog.Core v1.0 was discovered to contain a cross-site sc…4.8
• CVE-2022-3768The WPSmartContracts WordPress plugin before 1.3.12 does not…8.8
• CVE-2022-37680An improper authentication for critical function issue in Hi…7.5
• CVE-2022-37681Hitachi Kokusai Electric Newtork products for monitoring sys…7.5
• CVE-2022-3769The OWM Weather WordPress plugin before 5.6.9 does not prope…8.8
• CVE-2022-37700Zentao Demo15 is vulnerable to Directory Traversal. The impa…7.5
• CVE-2022-37703In Amanda 3.5.1, an information leak vulnerability was found…3.3
• CVE-2022-37704Amanda 3.5.1 allows privilege escalation from the regular us…6.7
• CVE-2022-37705A privilege escalation flaw was found in Amanda 3.5.1 in whi…6.7
• CVE-2022-37706enlightenment_sys in Enlightenment before 0.25.4 allows loca…7.8
• CVE-2022-37708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…