| Titre | ZeroWdd myblog 1.0 sql inject |
|---|
| Description | The keyword parameters for findBlogList and getTotalBlogs in src/main/resources/mapper/BlogMapper.xml are injected, allowing attackers to inject SQL without authorization |
|---|
| La source | ⚠️ https://github.com/ZeroWdd/myblog/issues/2 |
|---|
| Utilisateur | LVZC1 (UID 76422) |
|---|
| Soumission | 26/12/2024 15:27 (il y a 2 ans) |
|---|
| Modérer | 08/01/2025 13:05 (13 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 290782 [ZeroWdd myblog 1.0 BlogMapper.xml findBlogList/getTotalBlogs élévation de privilèges] |
|---|
| Points | 15 |
|---|