Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary SQL against a third party database if EDI is configured to import data from this database. This issue affects: Gallagher Command Centre 8.30 versions prior to 8.30.1236(MR1); 8.20 versions prior to 8.20.1166(MR3); 8.10 versions prior to 8.10.1211(MR5); 8.00 versions prior to 8.00.1228(MR6); version 7.90 and prior versions.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Gallagher Group Command Centre SQL注入漏洞
Vulnerability Description
Gallagher Group Command Centre是新西兰Gallagher Group公司的一款用于Gallagher门禁系统的集中控制工具。 Gallagher Group Command Centre 存在SQL注入漏洞，该漏洞允许远程攻击者可利用该漏洞通过“编辑企业数据接口”的特权，在将EDI配置为从第三方数据库导入数据的情况下，对该数据库执行任意SQL。以下产品及版本受到影响： Gallagher Command Centre 8.30 versions prior to 8.30.1
CVSS Information
N/A
Vulnerability Type
N/A