Dinstar Monitoring Platform 甘肃省危险品库监控平台 login_getPasswordErrorNum.action sql injection_CVE-2025-8773

{
    "lastseen": "",
    "description": "A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform \u7518\u8083\u7701\u5371\u9669\u54c1\u5e93\u76d1\u63a7\u5e73\u53f0 1.0. Affected is an unknown function of the file /itc/$%7BappPath%7D/login_getPasswordErrorNum.action. The manipulation of the argument userBean.loginName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-08-09T20:02:05.789Z",
    "modified": "2025-08-09T20:02:05.789Z",
    "type": "cve",
    "title": "Dinstar Monitoring Platform \u7518\u8083\u7701\u5371\u9669\u54c1\u5e93\u76d1\u63a7\u5e73\u53f0 login_getPasswordErrorNum.action sql injection",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.319296\nhttps://vuldb.com/?ctiid.319296\nhttps://vuldb.com/?submit.625361\nhttps://github.com/qiantx/cve/blob/main/cve6.md",
    "id": "CVE-2025-8773",
    "bulletinFamily": "",
    "cwe": [
        "CWE-89",
        "CWE-74"
    ],
    "cvelist": null,
    "sourceData": "Dinstar Monitoring Platform \u7518\u8083\u7701\u5371\u9669\u54c1\u5e93\u76d1\u63a7\u5e73\u53f0 1.0",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Monitoring Platform \u7518\u8083\u7701\u5371\u9669\u54c1\u5e93\u76d1\u63a7\u5e73\u53f0",
    "version": "1.0",
    "vendor": "Dinstar",
    "ai_description": "A SQL injection vulnerability in Dinstar Monitoring Platform allows remote attackers to exploit the login function, potentially leading to unauthorized data access. The vendor has not responded to disclosure attempts, leaving the issue unpatched.",
    "ai_severity": "Medium",
    "ai_vendor": "Dinstar",
    "ai_product": "Monitoring Platform \u7518\u8083\u7701\u5371\u9669\u54c1\u5e93\u76d1\u63a7\u5e73\u53f0",
    "ai_version": "1.0",
    "ai_score": 0
}