VYPR
← All advisories
Critical severity10.0NVD Advisory· Published Aug 6, 2020· Updated Jun 17, 2026

CVE-2020-7356

CVE-2020-7356

Description

CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Cayintech/Xpost3 versions
    cpe:2.3:a:cayintech:xpost:1.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cayintech:xpost:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cayintech:xpost:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cayintech:xpost:2.5.18103:*:*:*:*:*:*:*
  • Cayin/xPostllm-create
  • Cayin Technology/Cayin xPostv5
    Range: 2.5.18103

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.