| Description: | | ZenTaoPMS is a set of project management software developed by Nature Easy Soft Network Technology Company in order to solve the chaos and disorder in the management process of many enterprises.ZenTaoPMS 11.6 version has SQL injection vulnerability. The vulnerability is due to the imperfect filtering of user interface call permission in ZenTaoPMS 11.6 version, which leads to the existence of SQL injection vulnerability in the call interface. A remote attacker can execute arbitrary SQL statements through the api-getModel-api-sql-sql interface. |