CVE-2020-7356 in xPost정보

요약

\~에 의해 MITRE

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

책임이 있는

Rapid7, Inc.

예약하다

2020. 01. 21.

모더레이션

수락

항목

VDB-159363

익스플로잇

다운로드

EPSS

0.14014

출처

Do you need the next level of professionalism?

Upgrade your account now!