CVE-2025-6738

A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads...

CVE-2025-6738

CVE-2025-6738 affects huija bicycleSharingServer (up to commit 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a). The vulnerability is in userDao.selectUserByUserNameLike in UserServiceImpl.java, where improper handling of the Username argument enables SQL injection. The issue is remotely exploitable and...