一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月9日

CVE-2026-79573 – L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /atta

未分类
📑 文章目录

L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.