Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A SQL injection vulnerability via the Save Favorite Search function in Axefinance Axe Credit Portal >= v.3.0 allows authenticated attackers to execute unintended queries and disclose sensitive information from DB tables via crafted requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Axefinance Ax Credit Portal SQL注入漏洞
Vulnerability Description
Axefinance Axe Credit Portal是Axefinance公司的一个基于人工智能的端到端 LOS。 Axefinance Ax Credit Portal v.3.0及之后版本存在SQL注入漏洞，该漏洞源于保存收藏夹搜索功能中存在安全问题，允许经过身份验证的攻击者执行意外查询，并通过特制的请求泄露数据库表中的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A