SQL Injection Vulnerability in BuildingEasy™, a Comprehensive Management Information System of Shanghai Jinhui Software Co.

Shanghai Jinhui Software Co., Ltd. is a double-soft certified enterprise and high-tech enterprise recognized by Shanghai. A SQL injection vulnerability exists in BuildingEasy™, a comprehensive management information system of Shanghai Jinhui Software Co. An attacker can exploit this vulnerability...