| Título | kuaifan DooTask <= 1.2.49 SQL Injection |
|---|
| Descripción | There is a SQL injection vulnerability in dootask versions less than or equal to 1.2.49. Any logged-in user can inject SQL through the keys[department] parameter of /api/users/lists. |
|---|
| Fuente | ⚠️ https://github.com/kuaifan/dootask/issues/283 |
|---|
| Usuario | A_Groundhog (UID 89054) |
|---|
| Sumisión | 2025-09-03 12:04 (hace 1 Año) |
|---|
| Moderación | 2025-09-20 09:07 (17 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 325117 [kuaifan DooTask hasta 1.2.49 UsersController.php keys[department] inyección SQL] |
|---|
| Puntos | 16 |
|---|