CVE-2024-43040

Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo...

PT-2024-30267 · Unknown · Renwoxing Enterprise Intelligent Management System

Name of the Vulnerable Software and Affected Versions: Renwoxing Enterprise Intelligent Management System versions prior to 3.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the parid parameter at the "/fx/baseinfo/SearchInfo" API endpoint...