Headline
CVE-2023-42178: SQL Injection in log query module · Issue #I7X5QL · 郑州程序员/lenosp - Gitee.com
Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module.
Logined -> System Monitor -> System Logs -> Enter username and type -> Query
Obtain the data packet for the query
Run sqlmap
URI parameter ‘userName’ is injectable
Affected version: 1.0-1.2.0