Skip to content
Threat Feed

Product

PDM Product Data Management System (<= 8.3.9)

1 brief RSS
high advisory

Shandong Hoteam PDM Product Data Management System SQL Injection Vulnerability

Shandong Hoteam Software PDM Product Data Management System up to version 8.3.9 is vulnerable to SQL injection via manipulation of the SortOrder argument in the GetQueryMachineGridOnePageData function of the /Base/BaseService.asmx/DataService file, allowing remote attackers to potentially execute arbitrary SQL commands.

PDM Product Data Management System sql-injection cve-2026-7727 webserver
2r 1t 1c