CVE-2023-4712

CVE-2023-4712 affects Xintian Smart Table Integrated Management System v5.6.9. The vulnerability resides in SysManage/AddUpdateRole.aspx, where manipulating the txtRoleName parameter enables SQL injection. The exploit has been disclosed publicly. Remediation/workaround information from PT-SECURIT...

Xintian Smart Table Integrated Management System SQL Injection Vulnerability

Xintian Smart Table Integrated Management System is a smart table integrated management system from Xintian. A SQL injection vulnerability exists in Xintian Smart Table Integrated Management System version 5.6.9, which stems from an incorrect operation of the parameter txtRoleName that can lead t...