{"id":7272,"date":"2025-06-26T19:48:25","date_gmt":"2025-06-26T19:48:25","guid":{"rendered":"http:\/\/localhost\/?p=7272"},"modified":"2025-06-26T19:48:25","modified_gmt":"2025-06-26T19:48:25","slug":"huija-bicyclesharingserver-userserviceimpljava-userdaoselectuserbyusernamelike-sql-injection","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7272","title":{"rendered":"huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nhuija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-27T00:00:17.281Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nhuija<\/td>\n<\/tr>\n
Product<\/th>\nbicycleSharingServer<\/td>\n<\/tr>\n
Version<\/th>\n7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA critical SQL injection vulnerability was found in the huija bicycleSharingServer, specifically in the function userDao.selectUserByUserNameLike. This allows remote attackers to inject malicious SQL code by manipulating the Username argument. The exploit is publicly disclosed, making it a significant risk.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nhuija<\/td>\n<\/tr>\n
Product<\/th>\nbicycleSharingServer<\/td>\n<\/tr>\n
Affected Version<\/th>\n7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n