EQ Enterprise management system v2.2.0 - SQL Injection Vulnerability

Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection Exploit Author: TLF Vendor Homepage: https://www.yiquantech.com/pc/about.html Software Link漏洞影响应用下载链接:...

EQ Enterprise management system v2.2.0 - SQL Injection

Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection Date: 2022.12.7 Exploit Author: TLF Vendor Homepage: https://www.yiquantech.com/pc/about.html Software Link漏洞影响应用下载链接:...

EQ Enterprise Management System 2.2.0 SQL Injection

Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection Date: 2022.12.7 Exploit Author: TLF Vendor Homepage: https://www.yiquantech.com/pc/about.html Software Link漏洞影响应用下载链接:...

CVE-2022-45297

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...

CVE-2022-45297

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...

CVE-2022-45297

EQ Enterprise Management System versions 1.5.31 to 2.2.0 contain a SQL injection vulnerability exploitable via the UserPwd parameter. The flaw arises in the login/auth flow and can enable unauthorized access to sensitive data (high confidentiality/integrity/availability impact per CVSS 3.1). Publ...