RULE(RULE ID:333678)

Rule General Information
Release Date: 2021-06-17
Rule Name: Hanvon Face Attendance Management System SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Hanvon face attendance management system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information in the database.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.