Sql injection

2023-01-1918:15:00

PRIOn knowledge base

www.prio-n.com

zentao

sql injection

vulnerability

nvd

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

JSON

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.

CPENameOperatorVersion
zentaoeq18.0 beta1
zentaoge16.4
zentaolt18.0

Name	Operator	Version
zentao	eq	18.0 beta1
zentao	ge	16.4
zentao	lt	18.0

References

github.com/easysoft/zentaopms/issues/106

github.com/l3s10n/ZenTaoPMS_SqlInjection