Smart s200 Management Platform v.S200 - SQL Injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component. id: CVE-2024-27718 info: name: Smart s200 Management Platform v.S200 - SQL Injection author:...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

Baizhuo Network Smart s200 Management Platform 代码问题漏洞

Baizhuo Network Smart s200 Management Platform is a network management platform from Baizhuo, China. A code issue vulnerability exists in Baizhuo Network Smart s200 Management Platform version 20240507 and prior versions, which stems from an incorrect operation of the parameter webimg that can le...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

Sql injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

Baizhuo Network Smart s200 Management Platform Security Vulnerability

Baizhuo Network Smart s200 Management Platform is a network management platform from Baizhuo, China. A security vulnerability exists in Baizhuo Network Smart s200 Management Platform v.S200, which originates from a SQL injection vulnerability in the /importexport.php component...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

CVE-2024-27718

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component...

CVE-2024-27718

The connected Nuclei template confirms a SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200, exploitable via the /importexport.php component. The root cause is an SQL injection in that endpoint, allowing a local attacker to obtain sensitive information and escala...

PT-2024-22009 · Baizhuo Network · Baizhuo Network Smart S200 Management Platform

Name of the Vulnerable Software and Affected Versions: Baizhuo Network Smart s200 Management Platform version S200 Description: The issue allows a local attacker to obtain sensitive information and escalate privileges. This is achieved via the "/importexport.php" component, which is vulnerable to...