Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Control iD RHiD Edit a sql injection
Vulnerability Description
A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-225921 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Control iD iDSecure SQL注入漏洞
Vulnerability Description
Control iD iDSecure是Control iD公司的一个 ID 安全软件。 Control iD iDSecure 23.3.19.0版本存在SQL注入漏洞，该漏洞源于文件/v2/customerdb/operator.svc/a存在问题，对email的操作会导致sql注入。
CVSS Information
N/A
Vulnerability Type
N/A