Lucene search
+L

CVE-2020-7356: Improper Neutralization of Special Elements used in an SQL Command

🗓️ 06 Aug 2020 00:00:00Reported by Rapid7Type 
rapid7
 rapid7
🔗 www.rapid7.com👁 1 Views

Unauthenticated SQL Injection in CAYIN xPost via wayfinder_meeting_input.jsp enables SYSTEM commands.

Related
Refs
ReporterTitlePublishedViews
Family
zdt
zdt
Cayin xPost 2.5 SQL Injection / Remote Code Execution Exploit
18 Jun 202000:00
–zdt
attackerkb
attackerkb
CVE-2020-7356
6 Apr 202010:00
–attackerkb
circl
Circl
CVE-2020-7356
18 Jun 202015:43
–circl
cnvd
CNVD
CAYIN Technology xPost SQL Injection Vulnerability
19 Jun 202000:00
–cnvd
checkpoint_advisories
Check Point Advisories
CAYIN xPost Remote Code Execution (CVE-2020-7356)
16 Nov 202000:00
–checkpoint_advisories
cve
CVE
CVE-2020-7356
6 Aug 202015:45
–cve
cvelist
Cvelist
CVE-2020-7356 Cayin xPost SQL Injection
6 Aug 202015:45
–cvelist
metasploit
Metasploit
Cayin xPost wayfinder_seqid SQLi to RCE
4 Jun 202000:00
–metasploit
nvd
NVD
CVE-2020-7356
6 Aug 202016:15
–nvd
osv
OSV
CVE-2020-7356
6 Aug 202016:15
–osv
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Sep 2024 00:00Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.19.8 - 10
CVSS 210
EPSS0.14014
1