SQL Injection Vulnerability in BuildingEasy™, a Comprehensive Management Information System of Shanghai Jinhui Software Co.

Shanghai Jinhui Software Co., Ltd. is a double-soft certified enterprise and high-tech enterprise recognized by Shanghai. A SQL injection vulnerability exists in BuildingEasy™, a comprehensive management information system of Shanghai Jinhui Software Co. An attacker can exploit this vulnerability...

SQL Injection Vulnerability in BuildingEasy™ of Shanghai Jinhui Software Co.

Shanghai Jinhui Software Co., Ltd. is a high-tech enterprise focusing on the engineering design and construction industry, specializing in providing enterprise management informatization consulting services and software products. Ltd. BuildingEasy™ suffers from a SQL injection vulnerability, whic...

SQL Injection Vulnerability in BuildingEasy™ of Shanghai Jinhui Software Co. Ltd (CNVD-2021-24687)

Shanghai Jinhui Software Co., Ltd. is a high-tech enterprise focusing on the engineering design and construction industry, specializing in providing enterprise management informatization consulting services and software products. Ltd. BuildingEasy™ suffers from a SQL injection vulnerability, whic...

SQL Injection Vulnerability in BuildingEasy™ of Shanghai Jinhui Software Co. Ltd (CNVD-2021-24688)

Shanghai Jinhui Software Co., Ltd. is a high-tech enterprise focusing on the engineering design and construction industry, specializing in providing enterprise management informatization consulting services and software products. Ltd. BuildingEasy™ suffers from a SQL injection vulnerability, whic...

SQL Injection Vulnerability in Jinhui BuildingEasy™ V5.4

Jinhui BuildingEasy™ V5.4 hereinafter referred to as BE5.4, the platform uses the Microsoft Framework 4.0 framework, adopts a layered design pattern, and, on the basis of ensuring the vertical separation of code MVC, it also uses component insertion and removal technology on the business layer,...