ZTE GoldenDB SQL Injection Vulnerability

A SQL injection vulnerability has been identified in ZTE GoldenDB database product versions 6.1.03 prior to 6.1.03.10 and 7.2.01.01. This vulnerability allows attackers to inject commands that can be used to extract information from the database.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and potentially access or extract sensitive database information.

Remediation

Users can upgrade to ZTE GoldenDB versions 6.1.03.11 or 7.2.01.01P1 to address this vulnerability. For assistance, contact the ZTE Global Customer Support Center.