Sql injection

A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

CVE-2024-0890

Hongmaple Octopus 1.0 contains a SQL injection in the /system/dept/edit function triggered by manipulating the ancestors parameter. The vulnerability is exploitable remotely and can affect confidentiality, integrity, and availability. Public exploit discussion is present in the sources, but the p...

CVE-2024-0890 hongmaple octopus edit sql injection

A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...