CyberRota Analysis
AI-GeneratedA SQL injection vulnerability exists in the chiuwingyan house application, specifically affecting the /paid/selectall.action file due to improper handling of the 'zuname' argument. This flaw allows remote attackers to manipulate database queries, potentially leading to unauthorized data access or manipulation. Organizations using this application should prioritize remediation efforts, especially given the public disclosure of the exploit and the lack of vendor response.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.