{"id":7280,"date":"2025-06-26T23:32:23","date_gmt":"2025-06-26T23:32:23","guid":{"rendered":"http:\/\/localhost\/?p=7280"},"modified":"2025-06-26T23:32:23","modified_gmt":"2025-06-26T23:32:23","slug":"huija-bicyclesharingserver-admincontrollerjava-searchadminmessageshow-sql-injection","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7280","title":{"rendered":"huija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nhuija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-27T02:00:11.675Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nhuija<\/td>\n<\/tr>\n
Product<\/th>\nbicycleSharingServer<\/td>\n<\/tr>\n
Version<\/th>\n7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA SQL injection vulnerability exists in the searchAdminMessageShow function of the AdminController.java file in huija’s bicycleSharingServer. This vulnerability can be exploited remotely by manipulating the Title argument. The product does not use versioning, so specific affected versions are not available. The exploit has been publicly disclosed.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nhuija<\/td>\n<\/tr>\n
Product<\/th>\nbicycleSharingServer<\/td>\n<\/tr>\n
Affected Version<\/th>\n7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n