CVE-2026-90511

A SQL injection vulnerability exists in GongShengyue OnlineBooks (up to commit dfc5eacc) in the listSplit interface of the file src/cn/ylcto/book/servlet/BooksServlet.java. Manipulation of the column argument allows a remote, low-privilege attacker to inject SQL, impacting confidentiality, integr...

EUVD-2026-76984

A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql...