Liujianview Gymxmjpa SQL Injection Vulnerability in Membertype Controller

A critical SQL injection vulnerability has been identified in Liujianview Gymxmjpa version 1.0. The issue resides in the MembertypeController, specifically within the MembertypeDaoImpl function. The vulnerability arises because the typeName parameter is not properly sanitized, allowing for malicious SQL code to be injected and executed. This flaw can be exploited remotely, and details of the exploitation have been made public.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

To reproduce this vulnerability, send a request to the '/ktype/queryq' endpoint. Include a crafted typeName parameter that exploits the SQL query handling. The injection can be verified by using payloads that, for example, extract database information, such as the database name or version.