dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

CVE-2022-46442 (CVE-2022-46442) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2022-46442 — CVE-2022-46442?

Accepted Answer

dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

Question 2

What is the authoritative source for CVE-2022-46442?

Accepted Answer

CVE-2022-46442 (CVE-2022-46442) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	0.60% probability of exploitation · percentile 47.1% · 2026-10-06T12:00:23Z
Last modified	2026-06-17

CVE-2022-46442CVE-2022-46442

Description