| 标题 | octopus https://github.com/hongmaple/octopus v 1.0 SQL injection |
|---|
| 描述 | The octopus system has a vulnerability classified as severe. This may cause attackers to remotely inject operating system commands or code directly into the backend server. So as to control the backend system.
Attackers can steal sensitive data, such as user credentials, personal information, or business data, by injecting malicious SQL queries. Or control the server through SQL injection .
system url:
https://github.com/hongmaple/octopus
https://gitee.com/hongmaple/octopus
report url:
https://github.com/biantaibao/octopus_SQL/tree/main |
|---|
| 来源 | ⚠️ https://github.com/biantaibao/octopus_SQL/blob/main/report.md |
|---|
| 用户 | biantaibao (UID 45650) |
|---|
| 提交 | 2024-01-22 11時31分 (3 年前) |
|---|
| 管理 | 2024-01-22 12時18分 (47 minutes later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 251700 [hongmaple octopus 1.0 /system/role/list dataScope SQL注入] |
|---|
| 积分 | 20 |
|---|