Submit #551950: https://github.com/201206030/novel novel 3.5.0 SQL Injection

The BookInfoMapper.xml mapping file contains unsafe SQL statements.：order by

• Source: ⚠️ https://github.com/mapl3miss/novel-SQLi/blob/main/novelCMS-sqli.md
• User: maple147 (UID 83772)
• Submission: 04/05/2025 17:38 (1 Year ago)
• Moderation: 04/16/2025 02:56 (10 days later)
• Status: Accepted
• VulDB entry: 304965 [xxyopen Novel-Plus 3.5.0 /api/front/search/books sort sql injection]
• Points: 14