RULE(RULE ID:330518)

Rule General Information
Release Date: 2020-07-06
Rule Name: Cayin xPost wayfinder_seqid Remote Code Execution Vulnerability (CVE-2020-7356)
Severity:
CVE ID:
Rule Protection Details
Description: An SQL Injection in Cayin CMS below the 11.0 version.The Injection is executed in the system_wayfinder_seqid page.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Linux, Other Unix
Reference: https://packetstormsecurity.com/files/158141/Cayin-xPost-2.5-SQL-Injection-Remote-Code-Execution.html
https://packetstormsecurity.com/files/cve/CVE-2020-7356
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.cayintech.com/