Flowring Docpedia SQL Injection Vulnerability Allowing Unauthenticated Database Access
Vulnerability
A SQL injection vulnerability has been identified in Docpedia version 3.0, developed by Flowring. This vulnerability allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.
Impact
Exploitation of this vulnerability could result in unauthorized access to sensitive database information.
Remediation
Users are advised to install the patch DP4 HotFix_057.
Added: Feb 10, 2026, 8:03 AM
Updated: Feb 10, 2026, 8:03 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
2.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
