Description (CNA)
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Soar Cloud System Co., Ltd. / HR Portal | affected 0 7.3.2020.1013 |
CWE
CWE-89
References
- https://www.twcert.org.tw/tw/cp-132-4404-3f498-1.html
- https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e
ADP enrichment
No English description supplied.