Headline
CVE-2023-40787: CVE-2023-40787
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
CVE-2023-40787
[description]
In SpringBlade V3.6.0 when executing SQL query, the parameters
submitted by the user are not wrapped in quotation marks, which leads to SQL injection
[Vulnerability Type]
SQL Injection
[Vendor of Product]
https://github.com/chillzhuang/SpringBlade
[Affected Product Code Base]
SpringBlade - V3.6.0
[Attack Type]
Remote
[Discoverer]
cyvk
Related news
GHSA-62pr-54gv-vg5g: SpringBlade vulnerable to SQL injection
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.