Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synetics i-doit CMDB SQL注入漏洞
Vulnerability Description
Synetics i-doit是德国Synetics公司的一个基于Web的开源IT文档和CMDB（配置管理数据库），它能够记录IT系统及其变化的信息，同时针对系统变化制定应急方案，最终确保IT网络稳定、高效的运作。 Synetics i-doit pro 1.2.5之前的版本和i-doit open中的CMDB Web应用程序中存在SQL注入漏洞。远程攻击者可借助‘objID’参数利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A