URY 安全漏洞

URY is a restaurant management system from ury-erp open source. A security vulnerability exists in URY 0.2.0 and earlier versions, which stems from an incorrect manipulation of the parameter searchterm in the file ury/ury/api/posextend.py, which could lead to an SQL injection attack...