| Title | BRILLIANCE TECH Golden Link Secondary System 20250424 SQL Injection |
|---|
| Description | A SQL INJECTION vulnerability exists in the " 黄金通二级系统三代管理端 ".The system's API ’reprotframework/tcCustDeferPosiQuery.htm ‘ exits a SQL injection. The manipulation of the argument ’custTradeId ‘leads to sql injection. |
|---|
| Source | ⚠️ https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E9%BB%84%E9%87%91%E9%80%9Astorageworkrent-tcCustDeferPosiQuery.md |
|---|
| User | SecHZredo (UID 81966) |
|---|
| Submission | 06/01/2025 15:20 (1 Year ago) |
|---|
| Moderation | 06/04/2025 22:29 (3 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 311213 [Brilliance Golden Link Secondary System up to 20250424 tcCustDeferPosiQuery.htm custTradeId sql injection] |
|---|
| Points | 16 |
|---|