Soumettre #480838: JoeyBling bootplus 1.0 SQL Injection
| Titre | JoeyBling bootplus 1.0 SQL Injection |
|---|---|
| Description | The getPage method in src/main/java/io/github/service/impl/SysUserLoginLogServiceImpl.java did not filter the incoming sort, resulting in SQL injection |
| La source | ⚠️ https:/ |
| Utilisateur | LVZC3 (UID 79687) |
| Soumission | 14/01/2025 12:30 (il y a 1 Année) |
| Modérer | 24/01/2025 10:46 (10 days later) |
| Statut | Accepté |
| Entrée VulDB | 293228 [JoeyBling bootplus /admin/sys/log/list logId injection SQL] |
| Points | 15 |