Description
The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Excellent Infotek | e-document system | 0 3.0.2 | — |