Submit #552101: https://github.com/201206030/novel-plus novel-plus 5.1.0 SQL Injection

The FriendLinkMapper.xml mapping file contains unsafe SQL statements.：order by

• Source: ⚠️ https://github.com/mapl3miss/novel-plusSQLi/blob/master/novelPLUS-sqli.md
• User: maple147 (UID 83772)
• Submission: 04/06/2025 08:34 (1 Year ago)
• Moderation: 04/07/2025 08:11 (24 hours later)
• Status: Accepted
• VulDB entry: 303614 [xxyopen Novel-Plus 5.1.0 /novel/friendLink/list sort sql injection]
• Points: 14