提交 #652741: yangzongzhuan RuoYi 4.8.1 SQL Injection

There is an SQL injection vulnerability in the SQL parameters of the `/tool/gen/creatTable ` interface in ruoyi system v4.8.1. Hackers can exploit this vulnerability to obtain sensitive server information

• 来源: ⚠️ https://github.com/yangzongzhuan/RuoYi/issues/300
• 用户: uglory (UID 82151)
• 提交: 2025-09-11 16時43分 (1 年前)
• 管理: 2025-09-25 09時07分 (14 days later)
• 状态: 重复
• VulDB条目: 220082 [y_project RuoYi 直到 4.7.5 /tool/gen/createTable SQL注入]
• 积分: 0