CVE-2020-16165

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

CVE-2020-16165

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

Sql injection

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

CVE-2020-16165

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

CVE-2020-16165

CVE-2020-16165 affects SpringBlade up to 2.7.1. The DAO/DTO implementation allows SQL injection in an ORDER BY clause via the ascs/desc parameters of /api/blade-log/api/list. Impact is described as high, with potential for attackers to execute arbitrary SQL commands through the vulnerable sorting...

PT-2020-14787 · Springblade · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions prior to 2.7.2 Description: The issue concerns SQL Injection in the ORDER BY clause, related to the /api/blade-log/api/list endpoint, specifically the ascs and desc parameters. Recommendations: For versions prior to 2.7.2...

CVE-2020-16165: Improper Neutralization of Special Elements used in an SQL Command

The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters...

Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Network Technology

SpringBlade is a SpringCloud distributed microservices architecture upgraded and optimized from a commercial-grade project. Shanghai Bred Network Technology SpringBlade has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...