{"id":"CVE-2020-7356","aliases":["EUVD-2020-28483","GHSA-rx8q-gf7p-3fvp"],"status":"published","title":"Cayin xPost SQL Injection","description":"CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.14014,"percentile":0.96581,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2020-08-06T15:45:28Z","modified":"2026-06-17T03:24:45Z","exploits":[{"source":"metasploit","id":"exploit/windows/http/cayin_xpost_sql_rce","title":"Cayin xPost wayfinder_seqid SQLi to RCE","type":"exploit","platform":"Java,Windows","date":"2020-06-04","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/cayin_xpost_sql_rce"}],"products":[{"vendor":"cayin technology","product":"cayin xpost"},{"vendor":"cayintech","product":"xpost"}],"references":[{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5571.php","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://github.com/rapid7/metasploit-framework/pull/13607","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7356"},{"url":"https://github.com/advisories/GHSA-rx8q-gf7p-3fvp"}],"sources":{"cve":[{"id":"CVE-2020-7356","title":"Cayin xPost SQL Injection","description":"CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.","status":"published","published":"2020-08-06T15:45:28.016Z","modified":"2024-09-17T03:37:28.73Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28483","description":"CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.","status":"published","published":"2020-08-06T15:45:28Z","modified":"2024-09-17T03:37:28Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T00:28:30.275492Z"}],"ghsa":[{"id":"GHSA-rx8q-gf7p-3fvp","title":"CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET...","description":"CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.","status":"published","published":"2022-05-24T17:25:01Z","modified":"2023-01-29T05:03:39Z","updated_at":"2026-11-02T14:45:22.292804Z"}],"nvd":[{"id":"CVE-2020-7356","description":"CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and execute SYSTEM commands.","status":"published","published":"2020-08-06T16:15:13.577Z","modified":"2026-06-17T03:24:45.58Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:06:10.994748Z"}]}}