CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

Cross site request forgery (csrf)

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5r allows attackers to arbitrarily create admin users via a crafted HTTP request...

CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

CVE-2022-36635: Improper Neutralization of Special Elements used in an SQL Command

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

PT-2022-23519

Name of the Vulnerable Software and Affected Versions ZKteco ZKBioSecurity V5000 version 4.1.3 Description A SQL injection issue was discovered in the component /baseOpLog.do. This issue can potentially lead to remote code execution. Recommendations For ZKteco ZKBioSecurity V5000 version 4.1.3,...