Description (CNA)
The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MetaGuru / HCM | affected 7 before 7.5.3; affected 8 before 8.1.7.1 |
CWE
CWE-89
References
- https://www.twcert.org.tw/tw/cp-132-11035-5c640-1.html
- https://www.twcert.org.tw/en/cp-139-11036-986ec-2.html
ADP enrichment
No English description supplied.
No references supplied.