| Titre | octopus https://github.com/hongmaple/octopus v 1.0 SQL injection |
|---|
| Description | The octopus system has a vulnerability classified as severe. This may cause attackers to remotely inject operating system commands or code directly into the backend server. So as to control the backend system.
Attackers can steal sensitive data, such as user credentials, personal information, or business data, by injecting malicious SQL queries. Or control the server through SQL injection .
system url:
https://github.com/hongmaple/octopus
https://gitee.com/hongmaple/octopus
report url:
https://github.com/biantaibao/octopus_SQL/tree/main |
|---|
| La source | ⚠️ https://github.com/biantaibao/octopus_SQL/blob/main/report.md |
|---|
| Utilisateur | biantaibao (UID 45650) |
|---|
| Soumission | 22/01/2024 11:31 (il y a 3 ans) |
|---|
| Modérer | 22/01/2024 12:18 (47 minutes later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 251700 [hongmaple octopus 1.0 /system/role/list dataScope injection SQL] |
|---|
| Points | 20 |
|---|