SQL Injection Vulnerability in Changchun Engineering College's UFIDA GRP-U8 Administrative Business Internal Control Management Software

An unauthorized sql injection vulnerability exists in the Proxy page, where a database query is performed by constructing a post packet, and the results are returned and printed in the page source code. url: http://210.47.33.162/u8qx/Tindex.jsp Type: post sqlmap command: cVer=9.8.0&dp=?xml...

SQL Injection Vulnerability in UFIDA GRP-U8 Administrative Business Internal Control Management Software

hereinafter referred to as UFIDA, jointly established by UFIDA Software Group and the Institute of Fiscal Science of the Ministry of Finance, is an all-round business management information solution provider for government departments, institutions and non-profit organizations. A SQL injection...