gree.com, as data

GREE's Vulnerability Disclosure Announcement1. Vulnerabilities that can directly access core system privileges (server/clientpermissions), including but not limited to uploading Web Shells, arbitrary code execution, remote commandexecution, SQL injection to access core system privileges, etc.;2. Critical information leakage vulnerabilities in the core system, including but not limited to SQLinjection in core DB, extensive sensitive user identity information leakage (at least 3 sensitive fields:name/ID card, bank card information, phone number/email, passwords, address), internal core data leakage of3. Critical defects in the logical design or process of the core system, including but notlimited to payment vulnerabilities allowing bulk modification of any account passwords, arbitrary accountfund consumption, arbitrary amount modification, etc.;4. Vulnerabilities critically impacting the availability of the core system,such as vulnerabilities of denial of service that can directly cause paralysis of core system business;1. Vulnerabilities that can directly access important business system privileges(server/client permissions), including but not limited to arbitrary command execution, uploading Web Shells,arbitrary code execution, SQL injection to access core system privileges, etc.;2. Vulnerabilities directly leading to the leakage of important information, including butnot limited to SQL injection vulnerabilities in important DBs; leakage of extensive important businesssource codes; and SSRF vulnerabilities that enable access to internal networks and access sensitive3. Critical unauthorized access, including but not limited to bypassingauthentication to access important system backends; and operations such as unauthorized access,modification, and deletion of sensitive user information.1. Vulnerabilities requiring interaction to access user identity information, including but