Description
HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HGiga | OAKSv20 OAKlouds-mol_course_v3 2.0 | 2.0-124 – ≤ 2.0-146 | — |
| HGiga | OAKSv30 OAKlouds-mol_course_v3 3.0 | 3.0-124 – ≤ 3.0-146 | — |