critical9.8
CVE-2022-46442
dedecms <=V5.7.102 is vulnerable to SQL Injection.
Impact
dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dedecms | Dedecms | through 5.7.102 |