CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

CVE-2024-43040: Improper Neutralization of Special Elements used in an SQL Command

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

Renwoxing Enterprise Intelligent Management System 安全漏洞

Renwoxing Enterprise Intelligent Management System is an Enterprise Intelligent Management System from Renwoxing, China. A security vulnerability exists in Renwoxing Enterprise Intelligent Management System versions prior to 3.0, which originates from a SQL injection vulnerability in the parid...

CVE-2024-43040

The Renwoxing Enterprise Intelligent Management System (versions prior to v3.0 ) is vulnerable to a SQL injection (CWE-89) via the parid parameter at the /fx/baseinfo/SearchInfo endpoint. A remote attacker could exploit this to view, add, modify, or delete information in the back-end database. Th...

CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

PT-2024-30267 · Unknown · Renwoxing Enterprise Intelligent Management System

Name of the Vulnerable Software and Affected Versions: Renwoxing Enterprise Intelligent Management System versions prior to 3.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the parid parameter at the "/fx/baseinfo/SearchInfo" API endpoint...