| शीर्षक | Engeman Engeman Web <= 12.0.0.1 SQL Injection |
|---|
| विवरण | A vulnerability that allows manipulation of the SQL query made during the password recovery page load was found in the Engeman Web software. This vulnerability can be exploited by visitors without access to any valid credentials, that is, in an unauthenticated manner, to compromise the confidentiality and integrity of the data stored in the application's database, as well as potentially cause denial of service at the component level by altering values in critical tables. |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1fbe1o3ncvmYbw-w1MKMUJg7z-qu1Wyo81y9isFlNyi0/edit?usp=sharing |
|---|
| उपयोगकर्ता | m3m0o (UID 87980) |
|---|
| सबमिशन | 16/07/2025 05:29 AM (1 वर्ष पहले) |
|---|
| संयम | 26/07/2025 10:58 AM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 317808 [Engeman Web तक 12.0.0.2 Password Recovery Page /Login/RecoveryPass LanguageCombobox SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|