Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-46442 EUVD-2022-49247GHSA-ggfp-x753-xxvw

dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

Published Dec 27, 2022 · Updated Apr 11, 2025 · Assigned by mitre