CVE-2022-47745

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice...

CVE-2022-47745

CVE-2022-47745 affects ZenTao 16.4–18.0.beta1, with a SQL injection vulnerability exploitable after login via the importNotice function. The connected records clearly state the affected versions and the vulnerable component/entry point, but do not provide concrete patch details. A practical mitig...

CVE-2022-47745

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice...