| Description: | | Ruiyou Tianyi Application Virtualization System is an application virtualization platform with independent intellectual property rights and based on server computing architecture developed by Xi 'an Ruiyou Information Technology Information Co., LTD. SQL injection vulnerability exists in GetPwdPolicy, an application virtualization system. This vulnerability is caused by the fact that the system does not effectively filter user input and directly splicing it into SQL query statements, resulting in SQL injection vulnerability. |