إرسال #345311: Chanjet Smooth T+system V3.5 SQL Injectionالمعلومات

عنوانChanjet Smooth T+system V3.5 SQL Injection
الوصفDue to the lack of filtering and verification of user input at the keyEdit.aspx interface of Changjietong T+, unauthenticated attackers can not only exploit SQL injection vulnerabilities to obtain information from the database (such as administrator backend passwords, user personal information of the site), but even write Trojans to the server in high permission situations to further gain server system privileges.
المصدر⚠️ https://github.com/vulreport3r/cve-reports/blob/main/There_is_a_SQL_injection_vulnerability_in_the_Changjietong_T%2Bsystem/report.md
المستخدم
 Zhou Jiaming (UID 69510)
ارسال27/05/2024 12:08 PM (2 سنوات منذ)
الاعتدال05/06/2024 05:44 PM (9 days later)
الحالةتمت الموافقة
إدخال VulDB267185 [Chanjet Smooth T+system 3.5 keyEdit.aspx KeyID حقن SQL]
النقاط19

Interested in the pricing of exploits?

See the underground prices here!