CyberRota Analysis
AI-GeneratedThe front-end interface of super-diamond-server versions up to 1.3.3 is susceptible to SQL injection due to the insecure handling of the module parameter in SQL queries. This vulnerability allows attackers to manipulate database queries, potentially leading to unauthorized data access or modification. Organizations using affected versions should prioritize remediation to protect their databases from exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split() and string concatenation without being parameterized and bound.