| Titel | Yisaitong Electronic Document Security Management System v1.0 SQL injection |
|---|
| Beschreibung | There is SQL injection in the Nasetong electronic document security management system, which can be bypassed by the filter to achieve delayed injection. The vulnerable parameter is userName.There is SQL injection in the Nasetong electronic document security management system, which can be bypassed by the filter to achieve delayed injection. The vulnerable parameter is userName. |
|---|
| Quelle | ⚠️ https://github.com/zian10001/cve/blob/main/sql.md |
|---|
| Benutzer | zianA (UID 82530) |
|---|
| Einreichung | 20.03.2025 17:00 (vor 1 Jahr) |
|---|
| Moderieren | 30.03.2025 19:49 (10 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 302052 [ESAFENET CDG 3 /CDGServer3/UserAjax Benutzername SQL Injection] |
|---|
| Punkte | 19 |
|---|