Soumettre #480827: JoeyBling bootplus 1.0 SQL Injectioninformation

TitreJoeyBling bootplus 1.0 SQL Injection
DescriptionThe sort parameter in src/main/java/io/github/dao/SysMenuDao.xml is not in precompiled format, resulting in error injection. Attackers can directly query database information
La source⚠️ https://github.com/JoeyBling/bootplus/issues/19
Utilisateur
 LVZC3 (UID 79687)
Soumission14/01/2025 12:19 (il y a 2 ans)
Modérer24/01/2025 10:46 (10 days later)
StatutAccepté
Entrée VulDB293226 [JoeyBling bootplus /admin/sys/menu/list sort/order injection SQL]
Points15

◂ PrécédentAperçuSuivant ▸

Do you need the next level of professionalism?

Upgrade your account now!