Skip to content

Instantly share code, notes, and snippets.

@topsky979

topsky979/SpringBlade_sql_injection_1.md Secret

Created August 11, 2024 07:36
Show Gist options
  • Save topsky979/74dcbe81062718f314d81fb6ad5dc1e0 to your computer and use it in GitHub Desktop.
Save topsky979/74dcbe81062718f314d81fb6ad5dc1e0 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
SpringBlade_sql_injection_1.md

[description]

SpringBlade was discovered to contain a SQL Injection vulnerability via the URI /api/blade-system/menu/list.

[Vulnerability Type]

SQL Injection

[Vendor of Product]

https://github.com/chillzhuang/SpringBlade

[Affected Product Code Base]

<=v4.1.0

[Impact Escalation of Privileges]

true

[POC]
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment