提交 #475297: cy-fast 1.0 SQL Injection
| 标题 | cy-fast 1.0 SQL Injection |
|---|---|
| 描述 | The current version of cy-fast has an SQL injection vulnerability that allows attackers to execute SQL statements. Due to the lack of comprehensive filtering of SQL statements, users can concatenate and execute unfiltered SQL functions. |
| 来源 | ⚠️ https:/ |
| 用户 | d3do (UID 79609) |
| 提交 | 2025-01-06 10時29分 (2 年前) |
| 管理 | 2025-01-08 18時12分 (2 days later) |
| 状态 | 已接受 |
| VulDB条目 | 290820 [leiyuxi cy-fast 1.0 /sys/role/listData order SQL注入] |
| 积分 | 16 |