zhangbuneng/3

zhangbuneng/3

GitHubGitHub
GitHubgithub.com
Releases0
Hangzhou Xiongwei Technology Development Co., Ltd. - The DishTrade/dish_trade_detail_get interface in the Smart Catering Cloud Platform is vulnerable to SQL injection
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-14780↗
6.3 MEDIUM6.5 MEDIUM

A vulnerability was detected in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761. The affected element is an unknown function of the file /dishtrade/dish_trade_detail_get. The manipulation of the argument filter results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.