| タイトル | Chanjet Smooth T+system V3.5 SQL Injection |
|---|
| 説明 | Due to the lack of filtering and verification of user input at the keyEdit.aspx interface of Changjietong T+, unauthenticated attackers can not only exploit SQL injection vulnerabilities to obtain information from the database (such as administrator backend passwords, user personal information of the site), but even write Trojans to the server in high permission situations to further gain server system privileges. |
|---|
| ソース | ⚠️ https://github.com/vulreport3r/cve-reports/blob/main/There_is_a_SQL_injection_vulnerability_in_the_Changjietong_T%2Bsystem/report.md |
|---|
| ユーザー | Zhou Jiaming (UID 69510) |
|---|
| 送信 | 2024年05月27日 12:08 (2 年 ago) |
|---|
| モデレーション | 2024年06月05日 17:44 (9 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 267185 [Chanjet Smooth T+system 3.5 keyEdit.aspx KeyID SQLインジェクション] |
|---|
| ポイント | 19 |
|---|