Vulnerability · Published Aug 6, 2020 · Assigned by rapid7

CVE-2020-7356Cayin xPost SQL Injection

Critical 10.0

In plain English

A critical-severity SQL injection in Cayin xPost from Cayin Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 14.0% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)14.0%top 3.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Metasploit

Official description

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.

Affected products (as reported)

Vendor	Product	Versions
Cayin Technology	Cayin xPost	2.5.181032.01.0

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5571.php x_refsource_MISC
https://github.com/rapid7/metasploit-framework/pull/13607 x_refsource_MISC