11 matches found
CVE-2025-40979 DLL search order hijack in Wave by Grandstream Networks
DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users\AppData\Local\Temp' directory, which could lead to...
SQL Injection Vulnerability in 'infoid' Parameter of Wave Software Government System
Wave software government system is an industry informatization application system built on the basis of cloud computing and big data. A SQL injection vulnerability exists in the parameters of the WaveSoft Government System. The lack of filtering of the 'infoid' parameter allows an attacker to...
SQL Injection Vulnerability in id Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the id parameter of the administrative...
SQL Injection Vulnerability in TypeID Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the TypeID parameter of the administrati...
SQL Injection Vulnerability in InfoId Parameter of Wave Software Administrative Service System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the InfoId parameter of the administrati...
SQL Injection Vulnerability in DeptId Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the DeptId parameter of the administrati...
SQL Injection Vulnerability in QueryId Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the QueryId parameter of the...
SQL Injection Vulnerability in dicCode Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the dicCode parameter of the...
SQL Injection Vulnerability in LanMuId Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the LanMuId parameter of the...
SQL Injection Vulnerability in the username parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the username parameter of WaveSoft...
SQL Injection Vulnerability in the infoflowId Parameter of Wave Software Administrative Services System
The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the infoflowId parameter of the Wave...