VYPR
← All advisories
High severity8.8NVD Advisory· Published Jan 19, 2023· Updated Jun 17, 2026

CVE-2022-47745

CVE-2022-47745

Description

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Easysoft/Zentaopmsllm-fuzzy
    Range: 16.4 to 18.0.beta1
  • Zentao/Zentaollm-fuzzy2 versions
    16.4 to 18.0.beta1+ 1 more
    • (no CPE)range: 16.4 to 18.0.beta1
    • (no CPE)
  • Easycorp/Zentao2 versions
    cpe:2.3:a:easycorp:zentao:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:easycorp:zentao:*:*:*:*:*:*:*:*range: >=16.4,<18.0
    • cpe:2.3:a:easycorp:zentao:18.0:beta1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.