| 제목 | GitHub WMS (Warehouse Management System) V1.0 SQL Injection |
|---|
| 설명 | It has been confirmed that the WMS open-source enterprise warehouse management system suffers from a high-risk SQL injection vulnerability. This vulnerability arises from the system's failure to effectively filter user inputs, enabling attackers to insert malicious code into database queries. Successful exploitation of this vulnerability can bypass authentication, illegally read, tamper with, or delete sensitive information in the database, including user credentials, inventory, and business data, posing a serious threat to the confidentiality and integrity of the system. It is recommended that project maintainers immediately adopt secure coding methods such as parameterized queries for remediation and upgrade affected versions. Users should promptly pay attention to official patch updates. |
|---|
| 원천 | ⚠️ https://github.com/wangchaoxing/CVE/issues/1 |
|---|
| 사용자 | wangchaoxing (UID 94129) |
|---|
| 제출 | 2026. 01. 04. AM 09:02 (9 개월 ago) |
|---|
| 모더레이션 | 2026. 01. 16. PM 08:04 (12 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 341628 [FeMiner wms 까지 9cad1f1b179a98b9547fd003c23b07c7594775fa /src/chkuser.php username SQL 주입] |
|---|
| 포인트들 | 20 |
|---|