CVE-2025-2831

The CVE-2025-2831 entry concerns the mingyuefusu tushuguanlixitong (book management system). Affected component: the function getBookList in /admin/bookList?page=1&limit=10. Root cause: manipulation of the argument condition allows SQL injection. Implications: remote attack possible; exploits hav...

CVE-2025-2832

The CVE-2025-2832 entry relates to Mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统, affected up to commit d4836f6b49cd0ac79a4021b15ce99ff7229d4694. Concrete details in connected documents indicate a cross-site request forgery (CSRF ) vulnerability affecting some unknown processing. The issue can be man...