Description
SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2024-57521 ↗
- gitee.com/y_project/RuoYi/commit/ddd858ca732618a472b10eaab2f8e4b45812ffc5 ↗
- gitee.com/y_project/RuoYi/issues/IBC976 ↗
- github.com/mrlihd/CVE-2024-57521-SQL-Injection-PoC/blob/main/README.md ↗
- github.com/mrlihd/Ruoyi-4.7.9-SQL-Injection-PoC ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.