Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:fumasoft:fumeng_cloud:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Unauthenticated SQL Injection in Fumasoft Fumeng Cloud

Fumasoft Fumeng Cloud contains a critical SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to execute arbitrary database queries.

exploited Fumeng Cloud web-application sql-injection active-exploitation
1r 1t 1c