Sql injection

2023-02-2114:15:00

PRIOn knowledge base

www.prio-n.com

sql injection; znfit home improvement erp; wechat applet; nvd

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

JSON

SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet.

CPENameOperatorVersion
home_improvement_erp_management_systemeq42

CPE	Name	Operator	Version
	home_improvement_erp_management_system	eq	42

References

github.com/catwj/exp/blob/main/Injected%20by%20Shanghai%20Zhuangmeng%20Information%20Technology%20Co.%2C%20Ltd.md