Sql injection

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

CVE-2023-51805

The CVE-2023-51805 entry maps to TDuckCloud tduck-platform v4.0, where the vulnerability is a SQL Injection in the getFormKey parameter used by the search function in FormDataMysqlService.java. Source documents consistently indicate this affects TDuckCLoud tduck-platform 4.0 and can expose sensit...