| शीर्षक | https://github.com/mahonelau/-kykms kykms v1.0.0 The front-end SQL blind injection |
|---|
| विवरण | A front-end (no-login) blind SQL injection affects kykms. Its public list interfaces take a column request parameter that flows through QueryGenerator.doMultiFieldsOrder (QueryGenerator.java:216-250) and, after the blacklist SqlInjectionUtil.filterContent, is handed to MyBatis-Plus QueryWrapper.orderByAsc/Desc(column) which concatenates it directly into the ORDER BY clause. The blacklist string "and |...|;|or |+|user()" (SqlInjectionUtil.java:15-31) is missing if(, substr, version, database, benchmark, so an injected if(...) expression runs on the server and the whole database is extractable by boolean blind injection. No login is required on these front-end list endpoints. |
|---|
| स्रोत | ⚠️ https://github.com/fangtang7/CVE/blob/main/kykms/sql.md |
|---|
| उपयोगकर्ता | 3265048908 (UID 100110) |
|---|
| सबमिशन | 21/08/2026 08:18 AM (1 महीना पहले) |
|---|
| संयम | 29/09/2026 11:57 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 411276 [mahonelau kykms तक 8f130c2d85842d5b44caae78cc46d65e505949f7 SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder column SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|