CVE-2023-54400 | Fumasoft Fumeng Cloud AjaxMethod AjaxMethod.ashx getEmpByname Name sql injection

A vulnerability, which was classified as critical, has been found in Fumasoft Fumeng Cloud. This vulnerability affects the function getEmpByname of the file AjaxMethod.ashx of the component AjaxMethod. Performing a manipulation of the argument Name results in sql injection.

This vulnerability is reported as CVE-2023-54400. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More