Miantang vulnerabilities
We track 1 vulnerability in Miantang products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Miantang vulnerabilities
- 9.8 Critical severity
IoT-PHP: Improper Neutralization of Special Elements used in an SQL Command
Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from ['pwd'] with no sanitization and concatenates it into a raw SQL string: mysql_query("select * from userlists where username='' and password='' limit 1"). An u