Golden Link Secondary System
Monthly
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/custTakeInfoPage.htm, potentially leading to data theft or system compromise. A public exploit is available, but no active exploitation has been confirmed.
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/rentTakeInfoPage.htm, potentially leading to data breach or system compromise. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS score is low (0.07%), suggesting limited exploitation likelihood.
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcCustDeferPosiQuery.htm. The manipulation of the argument custTradeId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnerability affects unknown code of the file /storagework/rentChangeCheckInfoPage.htm. The manipulation of the argument clientname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424.htm. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/custTakeInfoPage.htm, potentially leading to data theft or system compromise. A public exploit is available, but no active exploitation has been confirmed.
SQL injection in Brilliance Golden Link Secondary System up to 20250609 allows remote authenticated attackers to manipulate the custTradeName parameter in /storagework/rentTakeInfoPage.htm, potentially leading to data breach or system compromise. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV. EPSS score is low (0.07%), suggesting limited exploitation likelihood.
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcCustDeferPosiQuery.htm. The manipulation of the argument custTradeId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
A vulnerability classified as critical was found in Brilliance Golden Link Secondary System up to 20250424. This vulnerability affects unknown code of the file /storagework/rentChangeCheckInfoPage.htm. The manipulation of the argument clientname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424.htm. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.