| 제목 | 广州图创计算机软件开发有限公司 Interlib <=V 2.0.1 SQL injection |
|---|
| 설명 | Guangzhou Tuchuang Computer Software Development Co., Ltd. is a high-tech enterprise that integrates product research and development, application integration, and customer service. Its main goal is to provide high-quality application software system design, integration, and maintenance services to users in the library industry.
The /interlib/admin/SysLib module in the Interlib Library Cluster Automation Management System V2.0.1 (referred to as "Interlib V2.0.1") contains a SQL injection vulnerability. Due to the module's failure to properly filter or validate user input SQL statements, attackers can construct malicious SQL statements to execute unauthorized database queries. Unauthenticated attackers can exploit this vulnerability to access sensitive information in the database, such as library configuration information and user data.
PR:H |
|---|
| 원천 | ⚠️ https://wiki.shikangsi.com/post/share/cfb12573-ca11-433d-b9a0-fce47837a1f5 |
|---|
| 사용자 | wiki (UID 72124) |
|---|
| 제출 | 2024. 10. 30. AM 10:51 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 11. 06. PM 09:31 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 283365 [Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System SQL 주입] |
|---|
| 포인트들 | 20 |
|---|