Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
JIWA Financials Crystal Reports .rpt文件 信息泄露漏洞
Vulnerability Description
JIWA Financials 6.4.14会将Microsoft SQL Server帐户的用户名和密码以及数据源的名称传给Crystal Reports .rpt文件, 远程认证用户可以通过在用户写入的.rpt 文件中引用某些标准存储过程来执行它们，比如使用可提供每个帐户的用户名和明文密码的存储过程。
CVSS Information
N/A
Vulnerability Type
N/A