search

wuweiit / mushroom

MRCMS 是一款基于Java的动态内容管理系统
http://cms.yl-blog.com
MIT License
216 stars 183 forks source link

SQL injection vulnerability was discovered in MRCMS #16

Closed QiAnXinCodeSafe closed 5 years ago

QiAnXinCodeSafe commented 5 years ago

Hi all, There are a SQL injection vulnerability found by Qihoo360 CodeSafe Team. Details as bellow: The getChannel method in the ChannelService. java file is used directly to hash and run SQL statements without filtering parameters, resulting in SQL injection。 default Continuous tracing can be found that the getChannel method is invoked in WebApp.java. default View WebParam.get () method default When param is empty (that is the first time), a param will be constructed ， view the constructor. default You can see that all attributes in WebParam are obtained from request and are controlled by attackers.

wuweiit commented 5 years ago

我不懂为什么要用英文描述这个注入bug，但我很高兴去解决这个问题的，感谢Qihoo360 CodeSafe Team.

wuweiit commented 5 years ago

最新源码已修复该 bug