CyberRota Analysis
AI-GeneratedThe Shenzhou Shihan Video Conference System v.1.0 is vulnerable to a critical SQL Injection flaw that enables remote attackers to execute arbitrary code through the /user/getUserLogin endpoint. Organizations using this video conferencing solution should prioritize immediate remediation efforts to mitigate the risk of unauthorized access and potential system compromise. This vulnerability poses a significant threat to the confidentiality and integrity of user data within the affected systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 allows a remote attacker to execute arbitrary code via the /user/getUserLogin endpoint