What’s Vulnerable › Vulnerabilities

CVE-2022-21666: SQL Injection in useredit.php

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-10 · updated 2026-06-17
• Weakness: CWE-89

Description

Useful Simple Open-Source CMS (USOC) is a content management system (CMS) for programmers. Versions prior to Pb2.4Bfx3 allowed Sql injection in usersearch.php only for users with administrative privileges. Users should replace the file `admin/pages/useredit.php` with a newer version. USOC version Pb2.4Bfx3 contains a fixed version of `admin/pages/useredit.php`.

Affected products

• Useful Simple Open-Source Cms Project Useful Simple Open-Source Cms: before pb2.4bfx3 — fixed in pb2.4bfx3

How to fix

Upgrade to a fixed version: Useful Simple Open-Source Cms Project Useful Simple Open-Source Cms pb2.4bfx3. Check the vendor advisory for mitigations.

References

• https://github.com/Aaron-Junker/USOC/commit/c331d26aaab41a7e9e8c1c1a990132dca9d01e10
• https://github.com/Aaron-Junker/USOC/releases/tag/Pb2.4Bfx3
• https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-557p-hhpc-4wrx
• https://github.com/Aaron-Junker/USOC/commit/c331d26aaab41a7e9e8c1c1a990132dca9d01e10
• https://github.com/Aaron-Junker/USOC/releases/tag/Pb2.4Bfx3
• https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-557p-hhpc-4wrx

Get alerted when CVE-2022-21666 or the next vulnerability affects your stack