CVE-2024-33335

SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file.

Score

CVSS 3.1 6.3 Medium

Status

Deferred - cve@mitre.org

Published

2024-06-20

Last modified

2024-08-02

Weaknesses

CWE-94

Affected products

• Seasql Dws (H3c)

References

• https://gist.github.com/vrhappy/08cb4c8721eed8a74fe786ecdff1ec1e
• https://www.h3c.com/cn/
• https://www.h3c.com/cn/Service/Online_Help/psirt/