{"id":"CVE-2020-22198","details":"SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.","modified":"2026-10-22T02:47:31.903052307Z","published":"2021-06-16T16:15:07.823Z","database_specific":{},"references":[{"type":"REPORT","url":"https://github.com/blindkey/DedeCMSv5/issues/1"},{"type":"EVIDENCE","url":"http://www.hackdig.com/?02/hack-8391.htm"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/blindkey/dedecmsv5","events":[{"introduced":"19a22b2b38bb005449d5d9112db5ea5f6260caa5"},{"last_affected":"19a22b2b38bb005449d5d9112db5ea5f6260caa5"}],"database_specific":{"extracted_events":[{"source":"CPE_STRING","cpe":"cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:*","range":[{"introduced":"5.7-NA"},{"last_affected":"5.7-NA"}]}]}}],"versions":["5.7-NA","v5.7SP2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-22198.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}