Submit #492531: xxyopen https://github.com/201206030/novel <= 3.4.1 SQL Injection
| Title | xxyopen https://github.com/201206030/novel <= 3.4.1 SQL Injection |
|---|---|
| Description | An attacker can launch a sql injection attack with a specific request at the /api/front/search/books interface |
| Source | ⚠️ https:/ |
| User | GSBP (UID 79733) |
| Submission | 01/31/2025 06:30 (1 Year ago) |
| Moderation | 02/10/2025 08:35 (10 days later) |
| Status | Accepted |
| VulDB entry | 295058 [xxyopen Novel up to 3.4.1 /api/front/search/books sort sql injection] |
| Points | 14 |