Flowring Docpedia SQL Injection Vulnerability Allowing Unauthenticated Database Access

Vulnerability

A SQL injection vulnerability has been identified in Docpedia version 3.0, developed by Flowring. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive database information.

Remediation

Users are advised to install the patch DP4 HotFix_057.

Added: Feb 10, 2026, 8:03 AM
Updated: Feb 10, 2026, 8:03 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
7.4
remediation
0.0
relevance
2.7
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.