Skip to content
OpenAdvisories

Vendor

CAYIN Technology

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-7356 Public exploit EPSS 14%

    Cayin xPost SQL Injection

    CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is not properly sanitized before being returned to the user or used in SQL queries. This can be exploi…

  • Critical 9.6
    CVE-2020-7357 Public exploit EPSS 32%

    Cayin CMS Command Injection

    Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cg…