Description
HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HGiga | OAKSv20 OAKlouds-document_v3 2.0 | unspecified – < 2.0-54 | 2.0-54 |
| HGiga | OAKSv30 OAKlouds-document_v3 3.0 | unspecified – < 3.0-54 | 3.0-54 |