| 제목 | Wuxi Wubang Security Software Co., Ltd. Wubang 'Five-in-One' Safety Production Management Information System V3.5 SQL Injection |
|---|
| 설명 | Through source code disclosure, and then through code auditing, an unauthenticated endpoint capable of executing arbitrary SQL statements was identified, and arbitrary commands were executed via xp_cmdshell.This may lead to sensitive data leakage, data tampering or destruction, credential theft, privilege escalation, lateral movement across internal systems, persistence, and full compromise of the database server or related infrastructure.
|
|---|
| 원천 | ⚠️ https://github.com/Rookie506/CVE/issues/2 |
|---|
| 사용자 | Jreey563 (UID 96485) |
|---|
| 제출 | 2026. 09. 17. PM 12:49 (1 월 ago) |
|---|
| 모더레이션 | 2026. 10. 19. PM 02:54 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 422334 [Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System /ws.asmx xp_cmdshell SQL 주입] |
|---|
| 포인트들 | 20 |
|---|