Skip to content
OpenAdvisories

Vendor

Shanghai Brad Technology

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.3

    Shanghai Brad Technology BladeX API export-user sql injection

    A vulnerability classified as critical has been found in Shanghai Brad Technology BladeX 3.4.0. Affected is an unknown function of the file /api/blade-user/export-user of the component API. The manipulation with the input updatexml(1,concat(0x3f,md5(123456),0…