Sql injection

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

CVE-2023-51805

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

CVE-2023-51805: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

TDuckCloud tduck-platform Security Vulnerability

TDuckCloud tduck-platform is an open source form survey system from China Zhongda Numerical Wealth Information Technology Limited TDuckCloud company. A security vulnerability exists in TDuckCLoud tduck-platform version v.4.0, which stems from the presence of a SQL injection vulnerability that...

PT-2024-14299 · Tduckcloud · Tduck-Platform

Name of the Vulnerable Software and Affected Versions: TDuckCLoud tduck-platform version 4.0 Description: The issue allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of the FormDataMysqlService.java file. This is a SQL Injection...