CVE-2026-7727
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Shandong Hoteam Software PDM Product Data Management System DataService GetQueryMachineGridOnePageData sql injection
A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Base/BaseService.asmx/DataService. This manipulation of the argument SortOrder causes sql injection. The attack can be initiated remotely. Upgrading to version 8.3.10 is able to mitigate this issue. You should upgrade the affected component.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
PDM Product Data Management System
- Vendor
- Shandong Hoteam Software
- Product
- PDM Product Data Management System
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8.3.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.3.10 | unaffected | Unavailable | Unavailable | Unavailable | None listed |