A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0. Impacted is an unknown function of the file /Easy7/apps/WebService/GetDBData.jsp. This manipulation of…

Published:

8 maart 2026 om 23:00:00

Alert date:

9 maart 2026 om 13:01:00

Source:

nvd.nist.gov

Web Technologies, Enterprise Applications

A SQL injection vulnerability has been discovered in Tiandy Easy7 CMS Windows version 7.17.0. The flaw affects the GetDBData.jsp file where manipulation of the strTBName argument leads to SQL injection. The vulnerability can be exploited remotely and exploit code has been published. The vendor was notified but has not responded to the disclosure.

Technical details

Mitigation steps:

Affected products:

Tiandy Easy7 CMS