CNNVD-202602-1667 Information

CNNVD ID

CNNVD-202602-1667

CVE-2026-2093

  • CNNVD Published: 2026-02-10

Description (Chinese)

Flowring Docpedia是中国华苓(Flowring)公司的一个文件管理系统。 Flowring Docpedia存在SQL注入漏洞,该漏洞源于未经验证的远程攻击者可注入任意SQL命令,可能导致读取数据库内容。

Description (English)

Flowing Docpedia is a document management system for the Chinese company Flowring. Flowing Docpedia has an injection loophole in SQL, which stems from the fact that uncertified remote assailants can inject any SQL order and may lead to access to database content.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

华苓

Published

2026-02-10

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html https://www.twcert.org.tw/tw/cp-132-10697-6a30b-1.html

Patch

https://www.flowring.com/agentflow/

Share on: