3 ms·
I found some mentions of "DrugSupervise" on a bunch of Chinese language sites, which lead me to find drugadmin.com. A google translate of the title tag tells m
by cjhveal 11y ago
I found some mentions of "DrugSupervise" on a bunch of Chinese language sites, which lead me to find drugadmin.com. A google translate of the title tag tells me it's a "Home _ Chinese Drug electronic monitoring network." I found another website with troubleshooting instructions that claim .NET as a dependency and show a Windows XP task manager with a process named DrugSupervise.exe. That support website lists the owner as "CITIC Technology Group", which may or may not be connected to the state-owned investment group "China International Trust and Investment Corporation", which offers a bunch of cloud services through their various subsidiaries.
I also found a github repo with some C# code:
https://github.com/katway/DrugSupervision https://github.com/katway/DrugSupervision
That's all I've got.
- jeswin 11y agoGood find. Since it is not a Web App and hence not publicly available to exploit: Use of String.Format instead Parameterized queries is how Sql injection issues sneak in. (Line 63, https://github.com/katway/DrugSupervision/blob/GuiDesign/DrugSupervise/ScannerForm.cs https://github.com/katway/DrugSupervision/blob/GuiDesign/Dru...)