CVE-2022-21643

CVE-2022-21643 concerns USOC, an open-source CMS. The vulnerability is a SQL injection in register.php triggered by unsanitized user inputs (username, email, password) used to construct SQL statements. Affected versions are susceptible; upgrade is advised and there are no documented workarounds i...

CVE-2022-21666

CVE-2022-21666 concerns the Useful Simple Open-Source CMS (USOC). Multiple connected records confirm a SQL injection vulnerability in the admin functionality, specifically involving the file path admin/pages/useredit.php and related usersearch.php logic. The flaw affects versions prior to Pb2.4Bf...

CVE-2022-21644

Summary: CVE-2022-21644 affects USOC, an open source CMS. The vulnerability arises in the search functionality (usersearch.php) where user-supplied terms are not sanitized and are directly used to construct SQL statements, enabling SQL injection. The issue is limited to affected USOC versions wit...