PT-2025-9017

Name of the Vulnerable Software and Affected Versions GFast versions v2 through v3.2 Description A SQL injection issue was found via the OrderBy parameter at the "/system/operLog/list" API endpoint. Recommendations For GFast versions v2 through v3.2, avoid using the OrderBy parameter in the...

CVE-2024-55160

The backend management system GFast (developed by tiger1103) is vulnerable to SQL injection in versions v2 through v3.2 . The flaw exists within the OrderBy parameter at the /system/operLog/list API endpoint. This vulnerability could allow an attacker to execute unauthorized SQL commands. As a wo...

CVE-2024-55160: Improper Neutralization of Special Elements used in an SQL Command

GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/operLog/list...