CVE-2025-0407

A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java. The manipulation of the argument hyname leads to sql...

CVE-2025-0407 liujianview gymxmjpa EquipmentController.java EquipmentDaoImpl sql injection

A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java. The manipulation of the argument hyname leads to sql...

CVE-2025-0407

CVE-2025-0407 affects liujianview gymxmjpa 1.0. The vulnerability is in EquipmentDaoImpl (EquipmentController.java) where the hyname parameter enables SQL injection. Remote exploitation is possible and public exploits have been disclosed. Connected sources consistently describe the vulnerability ...