Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SQL Injection in Hydrosystem Control System
Vulnerability Description
Hydrosystem Control System is vulnerable to SQL Injection across most scripts and input parameters. Because no protections are in place, an authenticated attacker can inject arbitrary SQL commands, potentially gaining full control over the database.This issue was fixed in Hydrosystem Control System version 9.8.5
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Hydrosystem Control System SQL注入漏洞
Vulnerability Description
Hydrosystem Control System是美国Hydrosystem公司的一个工业水处理与流体控制监测系统。 Hydrosystem Control System 9.8.5之前版本存在SQL注入漏洞,该漏洞源于大多数脚本和输入参数缺乏防护措施,可能导致经过身份验证的攻击者注入任意SQL命令,从而完全控制数据库。
CVSS Information
N/A
Vulnerability Type
N/A