| शीर्षक | Fuzhou Yinda Yunchuang Information Technology Smart Integrated Management Platform System 7.5 SQL Injection |
|---|
| विवरण | An unauthenticated SQL injection vulnerability has been identified in an additional interface of the Smart Integrated Management Platform System version 7.5, developed by Fuzhou Yinda Yunchuang Information Technology Co., Ltd.
Due to improper validation of user-supplied input, remote attackers can inject malicious SQL statements through this interface, resulting in unauthorized database access.
Successful exploitation may allow attackers to retrieve, modify, or manipulate sensitive database information, posing a serious risk to the confidentiality and integrity of affected systems.
The vulnerability affects version 7.5 and has been observed across a large number of exposed instances. |
|---|
| स्रोत | ⚠️ https://github.com/luoye197-prog/cve-yinda-sql2 |
|---|
| उपयोगकर्ता | lanmeik (UID 95270) |
|---|
| सबमिशन | 06/02/2026 12:57 PM (8 महीनों पहले) |
|---|
| संयम | 19/02/2026 06:17 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 346946 [Fujian Smart Integrated Management Platform System तक 7.5 XCamera.ashx ChannelName SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|