Ghostxbh Uzy-SSM-Mall SQL Injection Vulnerability

A critical SQL injection vulnerability has been identified in Ghostxbh Uzy-SSM-Mall version 1.0.0. The issue arises in the ForeProductListController, specifically within the /mall/product/0/20 endpoint. The vulnerability allows remote attackers to manipulate the orderBy parameter, leading to unauthorized database access or modification. This flaw exists because user input is not properly sanitized before being incorporated into SQL queries.

Impact

Exploitation of this vulnerability allows for arbitrary SQL query execution, potentially leading to unauthorized data access, modification, or deletion.

Reproduction

To reproduce this vulnerability, send a request to the /mall/product/0/20 endpoint with a crafted orderBy parameter that includes SQL injection payloads. The injected SQL will be executed by the database, demonstrating the vulnerability.