RULE(RULE ID:338262)

Rule General Information
Release Date: 2024-07-23
Rule Name: TianyuSoft Data Security Platform DownLoad.ashx SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: TianyuSoft Data Security Platform is a solution focused on data protection, providing functions such as data encryption, access control, and data leakage prevention to ensure the security and compliance of enterprise data. Its DownLoad.ahx has SQL injection vulnerabilities, which allow attackers to tamper with database data.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.