| 标题 | A Java cms with SQL injection exists https://github.com/miansen/Roothub/tree/v2.5 2.5 SQL Injection |
|---|
| 描述 | After downloading the source code on GitHub, build an environment, and then conduct a code audit to find SQL injection in the search area on the homepage
Address of the project: https://github.com/miansen/Roothub/tree/v2.5
For details of the vulnerability, please check my blog: https://github.com/wandeorfu/test/blob/main/sql1.md
This vulnerability looks serious, I hope it can be reviewed by you, thank you |
|---|
| 来源 | ⚠️ https://github.com/wandeorfu/test/blob/main/sql1.md |
|---|
| 用户 | wanderofu (UID 87839) |
|---|
| 提交 | 2025-07-28 05時28分 (1 年前) |
|---|
| 管理 | 2025-08-08 17時14分 (11 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 263242 [Roothub 2.6 search s SQL注入] |
|---|
| 积分 | 0 |
|---|