TDuckPro 授权问题漏洞

TDuckCloud TDuckPro is an out-of-the-box data collection tool from TDuckCloud that supports data collection, questionnaires, appointment enrollment, workflow approvals, form collections, public inquiries, OCR image recognition, and other high-level features. An authorization issue vulnerability...

PT-2024-39179 · Unknown · Tduckcloud Tduckpro

Name of the Vulnerable Software and Affected Versions: TDuckCloud TDuckPro versions up to 6.3 Description: A critical vulnerability was found in TDuckCloud TDuckPro, affecting an unknown functionality. The manipulation leads to weak password recovery, and the attack can be launched remotely. The...

CVE-2023-51805

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

CVE-2023-51805

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

TDuckCloud tduck-platform Security Vulnerability

TDuckCloud tduck-platform is an open source form survey system from China Zhongda Numerical Wealth Information Technology Limited TDuckCloud company. A security vulnerability exists in TDuckCLoud tduck-platform version v.4.0, which stems from the presence of a SQL injection vulnerability that...

CVE-2023-51805

The CVE-2023-51805 entry maps to TDuckCloud tduck-platform v4.0, where the vulnerability is a SQL Injection in the getFormKey parameter used by the search function in FormDataMysqlService.java. Source documents consistently indicate this affects TDuckCLoud tduck-platform 4.0 and can expose sensit...

CVE-2023-51805

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

CVE-2023-51805

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...