| Titel | bigantsoft BigAnt Office Messenger 5.6.06 Command Injection |
|---|
| Beschreibung | BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. 5.6.06 - 5.6.06. Vulnerability found latest version. While installing the app, stack queries are configured as open in SQL and thanks to this we can obtain RCE.
|
|---|
| Benutzer | scan9 (UID 79794) |
|---|
| Einreichung | 05.01.2025 21:09 (vor 2 Jahren) |
|---|
| Moderieren | 27.01.2025 11:21 (22 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 291057 [BigAnt Office Messenger 5.6.06 dev_code SQL Injection] |
|---|
| Punkte | 0 |
|---|