RULE(RULE ID:338620)

Rule General Information
Release Date: 2024-12-24
Rule Name: Founder Media Acquisition Rditing System reportCenter.do SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Founder Media Acquisition Rditing System is an intelligent integrated media business platform with content assets as its core, integrating omni-channel content such as newspaper, network, terminal, micro and we-media distribution platforms. The reportCenter.do interface of the system has an SQL injection vulnerability. An unauthenticated malicious attacker can use the SQL injection vulnerability to obtain information in the database and even write commands to the server with high permission to obtain the system permission of the server.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.