CVE-2022-47745

PoC ×2—

CVSS 3.1

8.8 high

EPSS

15%p97

Published

Jan 19, 2023 (Jan 19, 2023)

Modified

Jun 17, 2026

Description

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.

Vendors: easycorp
Products: zentao
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.4%)

In the news0 stories

No ingested article mentions this CVE yet.