PT-2025-52769

Name of the Vulnerable Software and Affected Versions RuoYi versions prior to 4.7.9 Description A SQL Injection issue exists in RuoYi versions prior to 4.7.9. This allows a remote attacker to execute arbitrary code through the createTable function located in SqlUtil.java. The vulnerability is...

CVE-2024-57521

SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java...

CVE-2024-57521

CVE-2024-57521 is a SQL Injection vulnerability in Ruoyi (RuoYi) Framework, affecting v4.7.9 and earlier. The flaw resides in SqlUtil.java (createTable function), allowing a remote attacker to execute arbitrary SQL/Code via crafted requests. Public evidence includes PoCs and multiple advisories a...