| शीर्षक | WeiYe-Jing DataX-Web <= 2.1.2 SQL Injection |
|---|
| विवरण | DataX-Web is a distributed data synchronization tool with web-based management. The application supports incremental data synchronization based on ID or timestamp. When using ID-based incremental sync, the system needs to query the maximum ID value from the source table. However, the table name and primary key column name are taken directly from user input without proper validation, leading to SQL injection. |
|---|
| स्रोत | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/datax-web-sql-injection-1/report.md |
|---|
| उपयोगकर्ता | sh7err (UID 91441) |
|---|
| सबमिशन | 02/11/2025 04:50 PM (6 महीनों पहले) |
|---|
| संयम | 15/11/2025 04:11 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 332585 [WeiYe-Jing datax-web तक 2.1.2 SQL इंजेक्शन] |
|---|
| अंक | 19 |
|---|