{"id":"CVE-2026-112252","kind":"vulnerability","aliases":["CVE-2026-112252"],"related":[],"title":"Wubang safety management system: SQL injection in /ws.asmx allows remote command execution","description":"A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xp_cmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"Wuxi Wubang Five-in-One Safety Production Management Information System up to version 3.5 has an SQL injection in the sql argument of the xp_cmdshell function in /ws.asmx. A remote attacker can send crafted SQL through that argument, and the xp_cmdshell call can run operating system commands on the database host.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["asp.net","safety-management","sql-server","vendor","wubang"],"not_affected_if":["product-not-installed"],"how_to_check":"- unknown","fix":"- unknown; the vendor did not respond to disclosure, so no patched version is known","status":"open","published_at":"2026-10-19T19:17:27+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T03:22:53+00:00","updated_at":"2026-10-25T03:22:53+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-25T03:22:53Z","model":"claude-haiku-5-5","output":{"fix":"- unknown; the vendor did not respond to disclosure, so no patched version is known","reach":"internet","title":"Wubang safety management system: SQL injection in /ws.asmx allows remote command execution","impact":"high","summary":"Wuxi Wubang Five-in-One Safety Production Management Information System up to version 3.5 has an SQL injection in the sql argument of the xp_cmdshell function in /ws.asmx. A remote attacker can send crafted SQL through that argument, and the xp_cmdshell call can run operating system commands on the database host.","category":"vendor","nicknames":[],"who_cares":["wubang","safety-management","asp.net","sql-server"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker runs OS commands on the database server remotely","analyst_note":"Check NVD and vendor or CNA pages for the exact affected build, whether xp_cmdshell is enabled by default, and whether authentication is required for /ws.asmx; the vendor did not respond, so no fix is known.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["product-not-installed"],"who_is_affected":"Organizations running the Wubang Five-in-One Safety Production Management Information System up to version 3.5 with the /ws.asmx web service exposed. Systems that do not run this product are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000591,"input_tokens":3368,"output_tokens":508,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-112252':15A,18A '-2026':14A,17A '/ws.asmx':8A,57B,114C '3.5':42B,104C 'affect':105C 'allow':9A 'argument':50B,67B,119C 'asp.net':19B 'attack':60B,126C 'call':72B 'cmdshell':54B,71B,110C 'command':11A,77B 'contact':146C 'craft':63B 'cve':13A,16A 'databas':80B 'disclos':135C 'disclosur':150C 'earli':147C 'execut':12A 'exploit':132C 'file':113C 'five':31B,94C 'five-in-on':30B,93C 'found':86C 'function':55B,108C 'host':81B 'inform':37B,100C 'initi':129C 'inject':6A,46B,124C 'lead':121C 'manag':3A,22B,36B,99C 'manipul':116C 'may':127C,140C 'one':33B,96C 'oper':75B 'product':35B,98C 'public':138C 'remot':10A,59B,130C 'respond':154C 'run':74B 'safeti':2A,21B,34B,97C 'safety-manag':20B 'secur':90C 'send':62B 'server':25B 'softwar':91C 'sql':5A,24B,45B,49B,64B,120C,123C 'sql-server':23B 'system':4A,38B,76B,101C 'use':142C 'vendor':26B,144C 'version':41B 'vulner':83C 'way':157C 'wubang':1A,27B,29B,89C,92C 'wuxi':28B,88C 'xp':53B,70B,109C","nicknames":[],"mitigations":[],"who_affected":"Organizations running the Wubang Five-in-One Safety Production Management Information System up to version 3.5 with the /ws.asmx web service exposed. Systems that do not run this product are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T19:17:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112252","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112252","severity":null,"published_at":"2026-10-19T19:17:27+00:00","modified_at":"2026-10-20T17:17:30+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}