Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:7 p.m.0 views

CVE-2026-4232

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The...

7.5CVSS6.9AI score0.00042EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.2 views

EUVD-2026-12381

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References5
NVD
NVD
added 2026/03/16 2:20 p.m.2 views

CVE-2026-4232

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The...

7.5CVSS0.00042EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/16 9:32 a.m.27 views

CVE-2026-4232 Tiandy Integrated Management Platform getAuthorityByUserId sql injection

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The...

7.5CVSS0.00042EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/16 9:32 a.m.2 views

CVE-2026-4232

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/03/16 9:32 a.m.7 views

CVE-2026-4232

Tiandy Integrated Management Platform 7.17.0 is affected by a SQL injection in /rest/user/getAuthorityByUserId. The vulnerability is triggered by manipulating the userId argument, with network-level access and no required privileges or user interaction. The exploit is publicly disclosed and the v...

7.5CVSS6.9AI score0.00042EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/16 9:32 a.m.2 views

CVE-2026-4232 Tiandy Integrated Management Platform getAuthorityByUserId sql injection

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /rest/user/getAuthorityByUserId. Executing a manipulation of the argument userId can lead to sql injection. The attack may be launched remotely. The...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.2 views

PT-2026-25663

Name of the Vulnerable Software and Affected Versions Tiandy Integrated Management Platform version 7.17.0 Description A flaw exists in Tiandy Integrated Management Platform 7.17.0 that could allow for SQL injection. The issue is related to an unknown functionality within the file...

7.5CVSS7AI score0.00042EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

Tiandy Integrated Management Platform SQL注入漏洞

Tiandy Integrated Management Platform is a comprehensive video surveillance management platform developed by Tiandy Company in China. Version 7.17.0 of Tiandy Integrated Management Platform contains a SQL injection vulnerability. This vulnerability stems from improper handling of the parameter...

7.5CVSS7.2AI score0.00042EPSS
Exploits0References4
Rows per page
Query Builder