| Titolo | www.zzskzy.com Refined warehousing management system v1.3 RCE |
|---|
| Descrizione | The code in the `ProcessRequest` method of the application lacks proper input validation, allowing for SQL Injection attacks which can lead to Remote Code Execution. |
|---|
| Fonte | ⚠️ https://github.com/Rain1er/report/blob/main/skWMX/5.md |
|---|
| Utente | xiao9cc (UID 82206) |
|---|
| Sottomissione | 02/03/2025 10:49 (1 Anno fa) |
|---|
| Moderazione | 11/03/2025 16:07 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 299289 [zzskzy Warehouse Refinement Management System 1.3 /getAdyData.ashx ProcessRequest showid iniezione SQL] |
|---|
| Punti | 15 |
|---|