Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in DB Soft SGLAC before 20.05.001. The ProcedimientoGenerico method in the SVCManejador.svc webservice of the SGLAC web frontend allows an attacker to run arbitrary SQL commands on the SQL Server. Command execution can be easily achieved by using the xp_cmdshell stored procedure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DB Soft SGLAC SQL注入漏洞
Vulnerability Description
DB Soft SGLAC 20.05.001之前版本中的Web前端的SVCManejador.svc Web服务的ProcedimientoGenerico方法存在安全漏洞。攻击者可利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A