HuangDou UTCMS SQL Injection Vulnerability
Vulnerability
A critical SQL injection vulnerability has been identified in HuangDou UTCMS version 9. The issue arises in the 'RunSql' function within 'app/modules/ut-data/admin/mysql.php', where improper handling of the 'sql' argument allows for SQL injection attacks. This vulnerability can be exploited remotely.
Impact
Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized database access, data manipulation, or execution of arbitrary SQL commands.
Added: Sep 10, 2025, 2:17 PM
Updated: Sep 10, 2025, 3:21 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.1exploitability
8.7remediation
0.0relevance
0.5threat
6.4urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.