Skip to content
OpenAdvisories

Vendor

Fumasoft

1 known vulnerabilities.

Products

Fumeng Cloud 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-54400

    Fumeng Cloud SQL Injection via AjaxMethod.ashx getEmpByname

    Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can e…

    Fumasoft Fumeng Cloud