| عنوان | Fuzhou Yinda Yunchuang Information Technology Smart Integrated Management Platform System 7.5 SQL Injection |
|---|
| الوصف | An unauthenticated time-based blind SQL injection vulnerability in the Smart Integrated Management Platform System developed by Fuzhou Yinda Yunchuang Information Technology Co., Ltd. allows remote attackers to execute arbitrary SQL queries and access sensitive database information.
The vulnerability affects version 7.5 and has been observed across a large number of exposed instances, significantly increasing the potential attack surface. |
|---|
| المصدر | ⚠️ https://github.com/luoye197-prog/cve-yinda-sql |
|---|
| المستخدم | lanmeik (UID 95270) |
|---|
| ارسال | 06/02/2026 12:02 PM (4 أشهر منذ) |
|---|
| الاعتدال | 19/02/2026 06:17 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 346945 [Fujian Smart Integrated Management Platform System حتى 7.5 XAccessPermissionPlus.ashx DeviceIDS حقن SQL] |
|---|
| النقاط | 20 |
|---|