| Titolo | BRILLIANCE TECH Golden Link Secondary System 20250424 SQL Injection |
|---|
| Descrizione | A SQL INJECTION vulnerability exists in the " 黄金通二级系统三代管理端 ".The system's API ’reprotframework/tcCustDeferPosiQuery.htm ‘ exits a SQL injection. The manipulation of the argument ’custTradeId ‘leads to sql injection. |
|---|
| Fonte | ⚠️ https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E9%BB%84%E9%87%91%E9%80%9Astorageworkrent-tcCustDeferPosiQuery.md |
|---|
| Utente | SecHZredo (UID 81966) |
|---|
| Sottomissione | 01/06/2025 15:20 (1 Anno fa) |
|---|
| Moderazione | 04/06/2025 22:29 (3 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 311213 [Brilliance Golden Link Secondary System fino a 20250424 tcCustDeferPosiQuery.htm custTradeId iniezione SQL] |
|---|
| Punti | 16 |
|---|