cbcvebase.
CVE-2022-28033
published 2022-04-12

CVE-2022-28033: Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php

PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
5.41%
91.7th percentile
Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php

Affected

1 ranges
VendorProductVersion rangeFixed in
thedigitalcraftatomcms——

Detection & IOCsextracted from sources · hover to see the quote

path/admin/uploads.php?id=sleep(7)↗
filenameAtom.CMS_admin_uploads.php↗
  • →Detect time-based blind SQLi attempts against Atom.CMS uploads endpoint by looking for the 'id=sleep(...)' pattern in GET requests to /admin/uploads.php ↗
  • →Successful exploitation produces a response body containing the string 'WHERE id', which can be used as a detection signal ↗
  • →Fingerprint Atom.CMS instances by checking for 'atomcms' in the HTML body of the root page before probing the vulnerable endpoint ↗
  • →Use Shodan query html:"atomcms" to identify internet-exposed Atom.CMS instances potentially vulnerable to CVE-2022-28033 ↗
  • →A response duration of 7 or more seconds on the /admin/uploads.php endpoint combined with HTTP 200 and 'WHERE id' in the body is a strong indicator of successful time-based SQL injection exploitation ↗
  • ·The SQL injection is unauthenticated (PR:N) and network-reachable (AV:N), meaning no prior authentication is required to exploit /admin/uploads.php via the 'id' parameter ↗
  • ·The detection template uses a 20-second timeout to accommodate the time-based sleep payload; network latency may cause false positives or false negatives if not accounted for ↗
  • ·Exploitation is only confirmed against Atom.CMS version 2.0 (CPE: cpe:2.3:a:thedigitalcraft:atomcms:2.0) ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.