| タイトル | Tiandy Technologies Co., Ltd. Eas7 Integrated Management Platform 7.17.0 SQL Injection |
|---|
| 説明 | A critical vulnerability was found in Eas7 Integrated Management Platform. It has been rated as critical. Affected by this issue is the component GetDBData.jsp. The manipulation of the argument strTBName with an optimized SQL payload leads to unauthenticated remote SQL injection. An attacker can exploit this to bypass all security controls, gaining full unauthorized access to the backend database. This allows for the extraction of sensitive administrative credentials and potentially grants the ability to modify or delete arbitrary data (Integrity Impact) and execute administrative functions, leading to a complete compromise of the system's confidentiality, integrity, and availability. |
|---|
| ソース | ⚠️ https://my.feishu.cn/docx/RvTMdXwUqowtxNxt9BFcD3TOn3f?from=from_copylink |
|---|
| ユーザー | 0menc (UID 75423) |
|---|
| 送信 | 2026年02月28日 10:18 (7 月 ago) |
|---|
| モデレーション | 2026年03月08日 18:41 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 349784 [Tiandy Easy7 CMS Windows 7.17.0 GetDBData.jsp strTBName SQLインジェクション] |
|---|
| ポイント | 20 |
|---|