Threats tagged 'ghsa-6p53-hx3w-pgfc'

A SQL injection vulnerability exists in the chiuwingyan house software affecting the /paid/selectall.action endpoint via the zuname parameter. This vulnerability allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. The vendor has not responded to disclosure attempts, and no specific affected or fixed versions are available due to the product's continuous delivery model. Public exploit code has been disclosed. The vulnerability has a CVSS 3.1 score of 7.3, indicating high severity.