| Title | yangzongzhuan RuoYi ≤4.8.1 sqli injection |
|---|
| Description | A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 .This vulnerability bypasses blacklist protection using %09 to conduct SQL injection attacks. |
|---|
| Source | ⚠️ https://github.com/mo957/vuln/blob/main/ruoyi_sqlinject/ruoyi_sqlinject.md |
|---|
| User | toBBe (UID 89867) |
|---|
| Submission | 09/05/2025 07:36 (1 Year ago) |
|---|
| Moderation | 09/15/2025 14:52 (10 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 323905 [yangzongzhuan RuoYi up to 4.8.1 Blacklist SqlUtil.java filterKeyword sql injection] |
|---|
| Points | 15 |
|---|