CVE-2022-46442

CRITICAL WAF: High
CVSS 9.8 Published: 2022-12-27
CWE-89 CWE-89

dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

WAF Coverage Analysis

SQL Injection High WAF Coverage

OWASP: A03:2021 Injection

942xxx - SQL Injection
SQL Injection High WAF Coverage

OWASP: A03:2021 Injection

942xxx - SQL Injection

Affected Software

VendorProductVersion
dedecmsdedecmsup to 5.7.102

References

Back to CVE Database