CNNVD-202508-2929 Information
Aug 25, 2025
cve
CNNVD ID
CNNVD-202508-2929
Related CVE
- CNNVD Published: 2025-08-25
Description (Chinese)
ruoyi-go是lostvip.com个人开发者的一个后台管理系统。 ruoyi-go 2.1及之前版本存在安全漏洞，该漏洞源于文件modules/system/service/LoginInforService.go中SelectPageList函数对isAsc参数处理不当，可能导致SQL注入。
Description (English)
Ruoyi-go is a back-office management system for individual developers in lostvip.com. The ruoyi-go 2.1 and previous versions have a security loophole, which stems from the improper handling of the sasc parameters by the SelectPageList function in document Modeules/system/service/LoginInforService.go, which may lead to the injection of SQL.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-08-25
Last Modified
2026-02-24
References
https://vuldb.com/?submit.633688 https://vuldb.com/?id.321252 https://vuldb.com/?ctiid.321252 https://github.com/on-theway/cve/issues/5 https://nvd.nist.gov/vuln/detail/CVE-2025-9411
Share on: