CVE-2022-36787: Webvendome Project Webvendome

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

webvendome - webvendome SQL Injection. SQL Injection in the Parameter " DocNumber" Request : Get Request : /webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE.

Affected products

• Webvendome Project Webvendome: version 1.0 only

Published 2022-11-17. Last modified 2026-06-17.