Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow (1) remote attackers to execute arbitrary SQL commands via the device ID REST parameter (PATH_INFO) to /ajax.php or (2) remote authenticated users to execute arbitrary SQL commands via the order parameter to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FancyFon Software FAMOC SQL注入漏洞
Vulnerability Description
FancyFon Software FAMOC是爱尔兰FancyFon Software公司的一套移动设备生命周期管理解决方案。该方案可通过互联网集中远程管理使用各种操作系统的智能手机。 FancyFon Software FAMOC 3.17.4之前版本中存在SQL注入漏洞，该漏洞源于/ajax.php脚本没有充分过滤‘device ID REST’参数；index.php脚本没有充分过滤‘order’参数。远程攻击者可利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A