Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain setups access the underlying operating system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProcessMaker Enterprise Core SQL注入漏洞
Vulnerability Description
ProcessMaker Enterprise Core是美国ProcessMaker公司的一套商业流程管理（BPM）和工作流管理软件。该软件可通过一个图形化的Web界面进行拖拽操作、自定义流程的Web窗体等。 ProcessMaker Enterprise Core 3.0.1.7-community版本中存在SQL注入漏洞。攻击者可通过发送特制的Web请求利用该漏洞窃取数据库数据，用户凭证和访问底层操作系统。
CVSS Information
N/A
Vulnerability Type
N/A