| शीर्षक | kuaifan DooTask <= 1.2.49 SQL Injection |
|---|
| विवरण | There is a SQL injection vulnerability in dootask versions less than or equal to 1.2.49. Any logged-in user can inject SQL through the keys[department] parameter of /api/users/lists. |
|---|
| स्रोत | ⚠️ https://github.com/kuaifan/dootask/issues/283 |
|---|
| उपयोगकर्ता | A_Groundhog (UID 89054) |
|---|
| सबमिशन | 03/09/2025 12:04 PM (1 वर्ष पहले) |
|---|
| संयम | 20/09/2025 09:07 AM (17 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 325117 [kuaifan DooTask तक 1.2.49 UsersController.php keys[department] SQL इंजेक्शन] |
|---|
| अंक | 16 |
|---|