Skip to content
Threat Feed

Vendor

Shenzhen Sixun Software

1 brief RSS
high advisory

SQL Injection Vulnerability in Sixun Shanghui Group Business Management System

A SQL injection vulnerability exists in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10 in the /api/Dinner/PayConfig endpoint, where a remote attacker can manipulate the 'tableno' argument to inject arbitrary SQL commands.

Sixun Shanghui Group Business Management System 10 sql-injection cve-2026-9544 web-application
2r 1t 1c