CNNVD-202507-053 Information

CNNVD ID

CNNVD-202507-053

CVE-2025-34059

  • CNNVD Published: 2025-07-01

Description (Chinese)

Dahua Smart Cloud Gateway Registration Management是中国大华(Dahua)公司的一款云网关注册平台。 Dahua Smart Cloud Gateway Registration Management存在安全漏洞,该漏洞源于/index.php/User/doLogin端点未清理输入导致SQL注入。

Description (English)

Dahua Smart Cloud Gateway Regulation Management is a cloud-net-watching platform for Dahua Corporation in China. There is a security loophole in Dahua Smart Cloud Gateway Regulation Management, which originates from/index.php/User/doLogin endpoint failure to clean input leading to SQL injection.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

大华

Published

2025-07-01

Last Modified

2026-02-24

References

https://pentest-tools.com/vulnerabilities-exploits/zhejiang-dahua-smart-cloud-gateway-registration-platform-sql-injection-cnvd-2024-38747_23762 https://vulncheck.com/advisories/dahua-smart-cloud-gateway-sql-injection https://www.dahuatech.com/ https://www.cnblogs.com/LeouMaster/p/18509644 https://www.cnvd.org.cn/flaw/show/CNVD-2024-38747 https://access.redhat.com/security/cve/cve-2025-34059

Share on: