{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/wubang-five-in-one-safety-production-management-information-system--3.5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wuxi_wubang_security_software:wubang_five_in_one_safety_production_management_information_system:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-112252"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Wubang Five-in-One Safety Production Management Information System (\u003c= 3.5)"],"_cs_severities":["high"],"_cs_tags":["sql-injection","rce","vulnerability","industrial"],"_cs_type":"advisory","_cs_vendors":["Wuxi Wubang Security Software"],"content_html":"\u003cp\u003eA critical SQL injection vulnerability, tracked as CVE-2026-112252, affects the Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System in versions up to 3.5. The vulnerability resides within the xp_cmdshell function accessible via the /ws.asmx web service endpoint. An unauthenticated remote attacker can supply malicious input to the sql argument, leading to SQL injection. Because the application interacts with system-level functions, this vulnerability can be leveraged to execute arbitrary commands on the underlying host. The vulnerability has been disclosed publicly, and given the lack of vendor response or remediation, affected systems are at high risk of compromise.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote code execution with the privileges of the web service process. This can lead to full system compromise, data exfiltration, or the installation of persistent backdoors on the affected industrial safety management infrastructure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor web server logs for suspicious requests to /ws.asmx containing SQL keywords or command execution characters in the 'sql' parameter.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation to isolate the Management Information System from external and untrusted networks.\u003c/li\u003e\n\u003cli\u003eIf the application cannot be patched, consider restricting access to the /ws.asmx endpoint using a Web Application Firewall (WAF) or equivalent gateway controls.\u003c/li\u003e\n\u003cli\u003eAudit the service account permissions under which the Wubang system runs to adhere to the principle of least privilege.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-19T20:11:58Z","date_published":"2026-10-19T20:11:58Z","id":"https://feed.craftedsignal.io/briefs/2026-10-wubang-sql-injection/","summary":"An unauthenticated remote SQL injection vulnerability in the xp_cmdshell function of the /ws.asmx endpoint in Wubang Five-in-One Safety Production Management Information System allows for arbitrary command execution.","title":"Remote SQL Injection in Wubang Five-in-One Safety Production Management System","url":"https://feed.craftedsignal.io/briefs/2026-10-wubang-sql-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Wubang Five-in-One Safety Production Management Information System (\u003c= 3.5)","version":"https://jsonfeed.org/version/1.1"}