Critical · 9.8 CVE-2026-51821 EUVD-2026-43608GHSA-pr6g-rx9p-2cw6

SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /us…

Published Jul 13, 2026 · Updated Jul 14, 2026 · Assigned by mitre

Description

SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint

References

https://www.cnblogs.com/goww/p/19942271
https://github.com/sign9981/CVE/issues/2