| Title | bigantsoft BigAnt Office Messenger 5.6.06 Command Injection |
|---|
| Description | BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. 5.6.06 - 5.6.06. Vulnerability found latest version. While installing the app, stack queries are configured as open in SQL and thanks to this we can obtain RCE.
|
|---|
| User | scan9 (UID 79794) |
|---|
| Submission | 01/05/2025 21:09 (2 years ago) |
|---|
| Moderation | 01/27/2025 11:21 (22 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 291057 [BigAnt Office Messenger 5.6.06 dev_code sql injection] |
|---|
| Points | 0 |
|---|