CVE-2020-3937

Name of the Vulnerable Software and Affected Versions SysJust Syuan-Gu-Da-Shih versions before 20191223

Description The issue allows attackers to perform unwanted SQL queries and access arbitrary files in the database. This is due to a SQL injection flaw.

Recommendations For versions before 20191223, update to a version released after 20191223 to resolve the issue. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation. Avoid using user-inputted data in SQL queries until the issue is resolved.