SQL Injection Vulnerability in the activityId Parameter of Jus OA System

Ninth OA system is the OA system to install, implement, learn, operate and maintain. There is a SQL injection vulnerability in the activityId parameter of the Ninth OA system. When Action is toNextActivity is, the activityId parameter is filtered to directly splice SQL statements, resulting in SQ...