myblog 安全漏洞

myblog is a personal blog by the individual developer of ZeroWdd. A security vulnerability exists in version 1.0 of myblog, which stems from an incorrect operation of the parameter findBlogList/getTotalBlogs that results in xml injection...

PT-2025-2048 · Unknown · Zerowdd Myblog

Name of the Vulnerable Software and Affected Versions: ZeroWdd myblog version 1.0 Description: A critical issue has been found in the unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the findBlogList and getTotalBlogs arguments leads to xml injection. The...