Flowring Docpedia SQL Injection Vulnerability Allowing Authenticated Attackers to Manipulate Database Contents
Vulnerability
A SQL injection vulnerability has been identified in Docpedia version 3.0, developed by Flowring. This vulnerability allows authenticated remote attackers to inject arbitrary SQL commands, enabling them to read, modify, and delete database contents.
Impact
Exploitation of this vulnerability could lead to unauthorized access to database information, as well as the ability to alter or remove database records.
Remediation
Users are advised to install the patch DP4 HotFix_057.
Added: Feb 10, 2026, 8:14 AM
Updated: Feb 10, 2026, 8:14 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.1exploitability
5.2remediation
0.0relevance
2.9threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.