shellfeel

icon indicating a website link https://9eek.cnblogs.com icon indicating an email [email protected]

icon location china icon location security researcher, application security engineer

Results 1 issues of shellfeel

[vulnerability] Back-office management statistics function sql injection in FormDataMysqlService.java (FormDataMysqlService.java 存在后管SQL注入漏洞)

## 1.Steps to reproduce (复现步骤) ### 1.Use the demo environment on the official website for authentication (`https://demo.tduckapp.com/project`) and register a user using the registration function ([email protected]/123456) (使用官网的demo环境进行验证（`https://demo.tduckapp.com/project`），使用注册功能注册一个用户([email protected]/123456)) ![image](https://github.com/TDuckCloud/tduck-platform/assets/18633010/5a08fe8c-52a7-4325-b0be-88202d457fa6) ### 2....