CVE-2025-0406 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/com…
Medium CVSS: 5.3

CVE-2025-0406

A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java. The manipulation of the argument subname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Vendor
Liujianview
Product
Gymxmjpa
CWE
CWE-74
Yayın Tarihi
2025-01-13 02:15:07
Güncelleme
2025-05-05 15:20:54
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Gymxmjpa MEDIUM Liujianview 2025

Referanslar

https://github.com/liujianview/gymxmjpa/issues/5 https://github.com/liujianview/gymxmjpa/issues/5#issue-2765786069 https://vuldb.com/?ctiid.291282 https://vuldb.com/?id.291282 https://vuldb.com/?submit.473417 https://github.com/liujianview/gymxmjpa/issues/5 https://github.com/liujianview/gymxmjpa/issues/5#issue-2765786069