Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 11:57 a.m.7 views

CVE-2025-0558

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

9.8CVSS7.2AI score0.00059EPSS
Exploits0References1
OSV
OSV
added 2025/01/18 1:15 p.m.1 views

CVE-2025-0558

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

9.8CVSS7.4AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/01/18 1:0 p.m.9 views

CVE-2025-0558 TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

6.5CVSS6.8AI score0.00059EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/01/18 1:0 p.m.9 views

CVE-2025-0558 TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

6.5CVSS0.00059EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/01/18 12:0 a.m.4 views

PT-2025-3951 · Tduckcloud · Tduck-Platform

Name of the Vulnerable Software and Affected Versions: TDuckCloud tduck-platform versions up to 4.0 Description: A critical issue was found in the TDuckCloud tduck-platform, affecting the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.jav...

6.5CVSS7.2AI score0.00059EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/01/18 12:0 a.m.2 views

TDuckCloud tduck-platform 注入漏洞

TDuckCloud tduck-platform is an open source form survey system from China's Zongda Numerical Wei TDuckCloud company. An injection vulnerability exists in TDuckCloud tduck-platform version 4.0 and earlier, which originates in src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java in...

9.8CVSS6.9AI score0.00059EPSS
Exploits0References5
Rows per page
Query Builder