| 标题 | Shenzhen Ruiming Technology Co., Ltd. Crocus System 1.3.44 SQL Injection |
|---|
| 描述 | A critical SQL injection vulnerability was discovered in the RemoteFormat.do component of Crocus. The endpoint fails to properly sanitize the State parameter in POST requests. By providing a specially crafted header Cookie: a="", an attacker can bypass the internal authentication check and reach the vulnerable SQL execution logic. Due to the lack of input validation, a remote unauthenticated attacker can perform time-based blind SQL injection to extract sensitive database information (e.g., the database name saffron) or achieve full database compromise. |
|---|
| 来源 | ⚠️ https://my.feishu.cn/docx/QZU6dXZBBoBeLMx4K28cW1BEnsZ?from=from_copylink |
|---|
| 用户 | 0menc (UID 75423) |
|---|
| 提交 | 2026-03-11 08時58分 (7 月前) |
|---|
| 管理 | 2026-03-26 17時29分 (15 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 353661 [Shenzhen Ruiming Technology Streamax Crocus 直到 1.3.44 Endpoint /RemoteFormat.do State SQL注入] |
|---|
| 积分 | 20 |
|---|