GobyVuls/CVE-2022-32300.md

YoudianCMS v9.5.0 SQL Injection (CVE-2022-32300)

Vulnerability	YoudianCMS v9.5.0 SQL Injection (CVE-2022-32300)
Chinese name	YoudianCMS v9.5.0 sql注入（CVE-2022-32300）
CVSS core	8.8
FOFA Query (click to view the results directly)	body="YoudianCMS"
Number of assets affected	987
Description	YouDianCMS is a website CMS. YoudianCMS v9.5.0 version exists security holes, the vulnerability stems from a pass/App/Lib/Action/Admin/MailAction class. PHP MailSendID parameters of SQL injection vulnerabilities are found out.
Impact	Able to read some sensitive files through SQL injection vulnerability.