ruoyi-go vulnerabilities
5 known vulnerabilities in ruoyi-go from Lostvip-com. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
ruoyi-go: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in lostvip-com ruoyi-go 2.1. This affects the function SelectListPage of the file modules/system/dao/SysRoleDao.go of the component Background Management Page. This manipulation of the argument sortName causes sql injection. Remote exploi
- 9.8 Critical severity
ruoyi-go: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/system_router.go. This manipulation of the argument orderByColumn/isAsc causes sql injection. The attack may be initiated remotely. T
- 9.8 Critical severity
ruoyi-go: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched
- 9.8 Critical severity
ruoyi-go: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1. The impacted element is the function SelectPageList of the file modules/system/service/LoginInforService.go. The manipulation of the argument isAsc leads to sql injection. The attack
- 9.8 Critical severity
ruoyi-go: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTableDao.go. Executing manipulation of the argument isAsc/orderByColumn can lead to sql injection. It is p