CVE-2022-47745

n/a / n/a PUBLISHED

Description (CNA)

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/l3s10n/ZenTaoPMS_SqlInjection
https://github.com/easysoft/zentaopms/issues/106

ADP enrichment

CVE

No English description supplied.

https://github.com/l3s10n/ZenTaoPMS_SqlInjection
https://github.com/easysoft/zentaopms/issues/106

CISA-ADP

No English description supplied.

No references supplied.