Security Advisory

CVE-2025-0409

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-13 02:31:05
Last updated 2025-01-13 18:01:15
Assigner VulDB
State PUBLISHED

Description

A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.