Sql injection

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

CVE-2023-51805

The TDuckCloud tduck-platform v.4.0 software contains a SQL Injection vulnerability (CWE-89) within the FormDataMysqlService.java file. A remote attacker can exploit the getFormKey parameter in the search function to obtain sensitive information. As a temporary workaround, it is recommended to re...

CVE-2023-51805: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...