Description
OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HGiga | OAKlouds | unspecified – ≤ OAKlouds-mol_metting-2.0-163, unspecified – ≤ OAKlouds-mol_metting-3.0-163 | — |