提交 #506037: n/a Mini-Tmall 2025/02/11 latest SQL Injection
| 标题 | n/a Mini-Tmall 2025/02/11 latest SQL Injection |
|---|---|
| 描述 | There is SQL injection vulnerability in Mini Tmall management background up to 20250211.Because the application does not verify the SQL statements entered from outside, there is SQL injection vulnerability, and the attacker can execute illegal SQL commands to obtain sensitive database data. |
| 来源 | ⚠️ https:/ |
| 用户 | yitclara (UID 81738) |
| 提交 | 2025-02-24 08時39分 (2 年前) |
| 管理 | 2025-03-03 19時15分 (7 days later) |
| 状态 | 重复 |
| VulDB条目 | 298109 [Mini-Tmall 直到 20250211 ProductMapper.java select orderBy SQL注入] |
| 积分 | 0 |