Sql injection

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

PT-2024-14299 · Tduckcloud · Tduck-Platform

Name of the Vulnerable Software and Affected Versions: TDuckCLoud tduck-platform version 4.0 Description: The issue allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of the FormDataMysqlService.java file. This is a SQL Injection...