Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A SQL injection vulnerability in the SoftExpert (SE) Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SoftExpert Excellence Suite SQL注入漏洞
Vulnerability Description
SoftExpert（SE）Excellence Suite是巴西SoftExpert公司的一套业务流程合规管理解决方案。该产品包括绩效管理、业务流程管理、企业内容管理和企业质量管理等。 SE Excellence Suite 2.0版本中存在SQL注入漏洞。远程攻击者可借助“cddocument”参数利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A