ZTE GoldenDB SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in multiple interfaces of the ZTE GoldenDB database product. This vulnerability allows attackers to inject commands and extract sensitive information from the database.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and potentially access or extract sensitive database information.
Remediation
Users can upgrade to ZTE GoldenDB versions 6.1.03.11, 7.2.01.01P1, or Lite7.2.01.01P1. For assistance, contact the ZTE Global Customer Support Center.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.