| Название | cy-fast 1.0 SQL Injection |
|---|
| Описание | The current version of cy-fast has an SQL injection vulnerability that allows attackers to execute SQL statements.
Due to the lack of comprehensive filtering of SQL statements, users can concatenate and execute unfiltered SQL functions.
the vulnerability hapens in SysUserController.java. |
|---|
| Источник | ⚠️ https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli2.md |
|---|
| Пользователь | d3do (UID 79609) |
|---|
| Представление | 06.01.2025 11:00 (2 лет назад) |
|---|
| Модерация | 08.01.2025 18:13 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 290821 [leiyuxi cy-fast 1.0 /sys/user/listData order SQL-инъекция] |
|---|
| Баллы | 17 |
|---|