mo957/vuln

mo957/vuln

GitHubGitHub
GitHubgithub.com
Releases0
This repository mainly records of the details of vulnerability discovery.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-10473↗
6.3 MEDIUM6.5 MEDIUM

A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil.java of the component Blacklist Handler. The manipulation results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.