| शीर्षक | 广州图创计算机软件开发有限公司 Interlib <=V 2.0.1 SQL injection |
|---|
| विवरण | Guangzhou Tuchuang Computer Software Development Co., Ltd. is a high-tech enterprise that integrates product research and development, application integration, and customer service. Its main goal is to provide high-quality application software system design, integration, and maintenance services to users in the library industry.
The /interlib/admin/SysLib module in the Interlib Library Cluster Automation Management System V2.0.1 (referred to as "Interlib V2.0.1") contains a SQL injection vulnerability. Due to the module's failure to properly filter or validate user input SQL statements, attackers can construct malicious SQL statements to execute unauthorized database queries. Unauthenticated attackers can exploit this vulnerability to access sensitive information in the database, such as library configuration information and user data.
PR:H |
|---|
| स्रोत | ⚠️ https://wiki.shikangsi.com/post/share/cfb12573-ca11-433d-b9a0-fce47837a1f5 |
|---|
| उपयोगकर्ता | wiki (UID 72124) |
|---|
| सबमिशन | 30/10/2024 10:51 AM (2 साल पहले) |
|---|
| संयम | 06/11/2024 09:31 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 283365 [Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|