提交 #492531: xxyopen https://github.com/201206030/novel <= 3.4.1 SQL Injection

An attacker can launch a sql injection attack with a specific request at the /api/front/search/books interface

• 来源: ⚠️ https://gist.github.com/GSBP0/9d26bf092647018e39eb515fb6c1eb0a
• 用户: GSBP (UID 79733)
• 提交: 2025-01-31 06時30分 (2 年前)
• 管理: 2025-02-10 08時35分 (10 days later)
• 状态: 已接受
• VulDB条目: 295058 [xxyopen Novel 直到 3.4.1 /api/front/search/books sort SQL注入]
• 积分: 14