| 제목 | cy-fast 1.0 SQL Injection |
|---|
| 설명 | The current version of cy-fast has an SQL injection vulnerability that allows attackers to execute SQL statements.
Due to the lack of comprehensive filtering of SQL statements, users can concatenate and execute unfiltered SQL functions.
The issue lies in the route `/commpara/listData`. |
|---|
| 원천 | ⚠️ https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli3.md |
|---|
| 사용자 | d3do (UID 79609) |
|---|
| 제출 | 2025. 01. 07. AM 03:36 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 01. 08. PM 09:34 (2 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 290857 [leiyuxi cy-fast 1.0 /commpara/listData order SQL 주입] |
|---|
| 포인트들 | 17 |
|---|