Vendor
An unauthenticated remote SQL injection vulnerability in the xp_cmdshell function of the /ws.asmx endpoint in Wubang Five-in-One Safety Production Management Information System allows for arbitrary command execution.