2 matches found
Sql injection
SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sysmsg/list/1/10...
5CVSS7.9AI score0.00692EPSS
SaveExploits1References1Affected Software1
CVE-2021-38239: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sysmsg/list/1/10...
7.5CVSS5.9AI score0.00692EPSS
SaveExploits1References3
20