Beveiligingsadvies

CVE-2025-34059

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-01 14:48:51

Laatst bijgewerkt 2025-11-20 18:34:32

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

An SQL injection vulnerability exists in the Dahua Smart Cloud Gateway Registration Management Platform via the username parameter in the /index.php/User/doLogin endpoint. The application fails to properly sanitize user input, allowing unauthenticated attackers to inject arbitrary SQL statements and potentially disclose sensitive information. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.

← Alle CVE's bekijken Bekijk op cve.org ↗