SQL injection vulnerability in library_id parameter of book retrieval system hold.jsp page at Beijing Chuangxun Future Software Technology Co.

Beitronix Library Public Access System is a system-integrated WEB system for the library industry. The product has a SQL injection vulnerability, the vulnerability URL is /opactwo/search2/hold.jsp?libraryid=, similar parameter is libraryid, the attacker can use the vulnerability to obtain the...