| 标题 | fastcms v0.1.5 SQL injection vulnerability |
|---|
| 描述 | The `client/article/list` interface of fastcms_v0.1.5 contains a SQL injection vulnerability. Attackers can exploit this vulnerability by constructing special SQL statements through the `orderBy` parameter, achieving the effect of SQL time-based blind injection, and thereby stealing sensitive information from the database. |
|---|
| 来源 | ⚠️ https://github.com/IceFoxH/VULN/issues/8 |
|---|
| 用户 | icefoxh (UID 82165) |
|---|
| 提交 | 2025-03-11 07時48分 (2 年前) |
|---|
| 管理 | 2025-03-21 08時18分 (10 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 300577 [FastCMS 直到 0.1.5 /api/client/article/list orderBy SQL注入] |
|---|
| 积分 | 0 |
|---|