datagear <=4.60 command executioninfo

Titel	http://www.datagear.tech/ datagear <=4.60 command execution
Beschreibung	datagear exists a freemaker template injected in the /dataSet/resolveSql route rendering sql statement
Quelle	⚠️ https://github.com/nn0nkey/nn0nkey/blob/main/Datagear/freemaker.md
Benutzer	nn0nkey (UID 74287)
Einreichung	13.11.2024 01:38 (vor 2 Jahren)
Moderieren	21.11.2024 07:52 (8 days later)
Status	Akzeptiert
VulDB Eintrag	285658 [DataGear bis 4.60 /dataSet/resolveSql sql SQL Injection]
Punkte	14

Do you want to use VulDB in your project?

Use the official API to access entries easily!