Sql injection

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...

CVE-2023-24163

CVE-2023-24163 describes a SQL injection in Dromara Hutool that can lead to remote code execution via the Aviator template engine. Public notes consistently cite Hutool v5.8.x ranges: vulnerable up to 5.8.21 (pre-5.8.21), with references indicating exploitation could occur through template evalua...