CNNVD-202602-1243 Information

CNNVD ID

CNNVD-202602-1243

CVE-2026-2122

  • CNNVD Published: 2026-02-08

Description (Chinese)

Henan Xiaopi Panel是中国河南小皮(Henan Xiaopi)公司的一个Linux图形化界面。 Henan Xiaopi Panel 20260126及之前版本存在SQL注入漏洞,该漏洞源于对组件WAF Firewall中文件/demo.php的参数ID的错误操作,可能导致SQL注入攻击。

Description (English)

Henan Xiaopi Panel is a Linux graphical interface for Henan Xiao Pi in China. Henan Xiaopi Panel 20260126 and previous versions had an injection loophole in SQL, which stemmed from an error in the id of the document/demo.php in component WAF Firewall, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

河南小皮

Published

2026-02-08

Last Modified

2026-02-24

References

https://vuldb.com/?submit.746917 https://vuldb.com/?ctiid.344695 https://vuldb.com/?id.344695 https://github.com/ltranquility/CVE/issues/37 https://access.redhat.com/security/cve/cve-2026-2122

Share on: