CVE-2020-7356

Cayin xPost SQL Injection

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.

Affected

Cayin Technology · Cayin xPost

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 RAPID7

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

14.01% chance of exploitation in the next 30 days, 97th percentile

Published

2020-08-06

Updated

2024-09-17

Proof-of-concept exploits (1)

• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5571.php

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/cayin_xpost_sql_rce…

Security advisories

• rapid7/metasploit-framework/pull/13607

References

• CVE Record
• NVD entry