Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report module exposes direct SQL commands via POST data in order to select data for report generation. A malicious actor can use the bi report endpoint as a direct SQL prompt under the authenticated user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dalmark Systems Systeam SQL注入漏洞
Vulnerability Description
Dalmark Systems Systeam是巴西Dalmark Systems公司的一个 Erp 系统。 Dalmark Systems Systeam存在安全漏洞，该漏洞源于Systeam应用程序是一个ERP系统，它使用基于SaaS租户和用户管理的混合架构，以及内部数据库和web应用程序。bi报告模块通过POST数据公开直接SQL命令，以便为生成报告选择数据。恶意的参与者可以使用bi报告端点作为身份验证用户下的直接SQL提示。
CVSS Information
N/A
Vulnerability Type
N/A