Shenzhen Landray Landry Office Automation 2024-03-11 wechatLoginHelper.do findList uid sql injection

Summaryinfo

A vulnerability marked as critical has been reported in Shenzhen Landray Landry Office Automation 2024-03-11. Affected by this issue is the function findList of the file wechatLoginHelper.do. Performing a manipulation of the argument uid results in sql injection. This vulnerability is identified as CVE-2024-58352. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in Shenzhen Landray Landry Office Automation 2024-03-11. It has been classified as critical. This affects the function findList of the file wechatLoginHelper.do. The manipulation of the argument uid with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-564. Using Hibernate to execute a dynamic SQL statement built with user-controlled input can allow an attacker to modify the statement's meaning or to execute arbitrary SQL commands. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input sanitization in the string-concatenated filter expression passed to the Hibernate findList() call to extract sensitive data such as administrator password hashes and, with sufficient database privileges, perform file-write operations enabling remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-03-11 (UTC).

The advisory is shared at cn-sec.com. This vulnerability is uniquely identified as CVE-2024-58352 since 06/08/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/02/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Automation Software

Vendor

• Shenzhen Landray

Name

• Landry Office Automation

Version

• 2024-03-11

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion