CVE-2022-34956

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-34968.8A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknownCVE-2022-349609.8The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to lCVE-2022-349615.4OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349625.4OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349635.4OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349644.8OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349657.2OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /CVE-2022-349667.5OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameterCVE-2022-349677.5The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.CVE-2022-349687.5An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL queCVE-2022-349697.5PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.CVE-2022-34975.4A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unkn
CVE-2022-34956: Critical severity, CVSS 9.8 | Vulnix