Sign-up

ID

VAR-201804-1728


TITLE

SQL injection vulnerability exists in Shenzhen One Technology Group Co., Ltd. website construction system

Trust: 0.6

sources: CNVD: CNVD-2018-05671

DESCRIPTION

Shenyi Technology Group Co., Ltd. is developing website construction and network application services, mobile APP development, big data mining, cloud computing, Internet of Things, smart home, intellectual property agency, investment and financing services, O2O convenience stores (online and offline), electronics Business and international trade as one integrated service-oriented enterprise. There is a SQL injection vulnerability in the website construction system of Shenyi Technology Group Co., Ltd. An attacker can use the vulnerability to obtain database sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2018-05671

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2018-05671

AFFECTED PRODUCTS

vendor:shenyi groupmodel:website construction systemscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2018-05671

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2018-05671
value: HIGH

Trust: 0.6

CNVD: CNVD-2018-05671
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2018-05671

PATCH

title:SQL injection vulnerability exists in Shenzhen One Technology Group Co., Ltd. website construction systemurl:https://www.cnvd.org.cn/patchinfo/show/120607

Trust: 0.6

sources: CNVD: CNVD-2018-05671

EXTERNAL IDS

db:CNVDid:CNVD-2018-05671

Trust: 0.6

sources: CNVD: CNVD-2018-05671

SOURCES

db:CNVDid:CNVD-2018-05671

LAST UPDATE DATE

2022-05-04T09:04:05.070000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2018-05671date:2018-03-21T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2018-05671date:2018-04-20T00:00:00