一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月9日

CVE-2026-79570 – mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tab

未分类
📑 文章目录

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.