CVE-2025-0407 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the…
Medium CVSS: 5.3

CVE-2025-0407

A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java. The manipulation of the argument hyname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Vendor
Liujianview
Product
Gymxmjpa
CWE
CWE-74
Yayın Tarihi
2025-01-13 02:15:07
Güncelleme
2025-05-05 15:21:03
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Gymxmjpa MEDIUM Liujianview 2025

Referanslar

https://github.com/liujianview/gymxmjpa/issues/7 https://github.com/liujianview/gymxmjpa/issues/7#issue-2765800789 https://vuldb.com/?ctiid.291283 https://vuldb.com/?id.291283 https://vuldb.com/?submit.473422 https://github.com/liujianview/gymxmjpa/issues/7 https://github.com/liujianview/gymxmjpa/issues/7#issue-2765800789