Описание
A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-243717 was assigned to this vulnerability.
Ссылки
- Exploit
- Permissions RequiredThird Party AdvisoryVDB Entry
- Permissions RequiredThird Party AdvisoryVDB Entry
- Exploit
- Permissions RequiredThird Party AdvisoryVDB Entry
- Permissions RequiredThird Party AdvisoryVDB Entry
Уязвимые конфигурации
EPSS
5.5 Medium
CVSS3
9.8 Critical
CVSS3
5.2 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-243717 was assigned to this vulnerability.
EPSS
5.5 Medium
CVSS3
9.8 Critical
CVSS3
5.2 Medium
CVSS2