writeups.xyz / CVE-2022–36635 — A SQL Injection in ZKSecurityBio to RCE

Submitter : c2a

Date: 6 October 2022

Bounty : undisclosed

Vulnerabilities :

• SQL Injection

Programs :

• ZKTeco

Authors :

• Caio Burgardt (@CaioBurgardt)
• Silton Santos

Link :
https://medium.com/stolabs/cve-2022-36635-a-sql-injection-in-zksecuritybio-to-rce-c5bde2962d47