Wubang Five-in-One Safety Production Management Information System (<= 3.5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/wubang-five-in-one-safety-production-management-information-system--3.5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 19 Oct 2026 20:11:58 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemote SQL Injection in Wubang Five-in-One Safety Production Management Systemhttps://feed.craftedsignal.io/briefs/2026-10-wubang-sql-injection/Mon, 19 Oct 2026 20:11:58 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-wubang-sql-injection/An unauthenticated remote SQL injection vulnerability in the xp_cmdshell function of the /ws.asmx endpoint in Wubang Five-in-One Safety Production Management Information System allows for arbitrary command execution.A critical SQL injection vulnerability, tracked as CVE-2026-112252, affects the Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System in versions up to 3.5. The vulnerability resides within the xp_cmdshell function accessible via the /ws.asmx web service endpoint. An unauthenticated remote attacker can supply malicious input to the sql argument, leading to SQL injection. Because the application interacts with system-level functions, this vulnerability can be leveraged to execute arbitrary commands on the underlying host. The vulnerability has been disclosed publicly, and given the lack of vendor response or remediation, affected systems are at high risk of compromise.

Impact

Successful exploitation allows for remote code execution with the privileges of the web service process. This can lead to full system compromise, data exfiltration, or the installation of persistent backdoors on the affected industrial safety management infrastructure.

Recommendation

  • Monitor web server logs for suspicious requests to /ws.asmx containing SQL keywords or command execution characters in the 'sql' parameter.
  • Implement network segmentation to isolate the Management Information System from external and untrusted networks.
  • If the application cannot be patched, consider restricting access to the /ws.asmx endpoint using a Web Application Firewall (WAF) or equivalent gateway controls.
  • Audit the service account permissions under which the Wubang system runs to adhere to the principle of least privilege.
]]>highadvisorysql-injectionrcevulnerabilityindustrial