TI-2023-30650 CVE-2023-54400 · GHSA-39vr-225p-6ccc
Fumeng Cloud SQL Injection via AjaxMethod.ashx getEmpByname
Priority HIGH 81
Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action with…