CVE-2026-90511
Received Received - Intake

SQL Injection in GongShengyue OnlineBooks

Publication date: 2026-09-13

Last updated on: 2026-09-13

Assigner: VulDB

Description
A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-13
Last Modified
2026-09-13
Generated
2026-09-13
AI Q&A
2026-09-13
EPSS Evaluated
N/A
NVD
CVE-2026-90511
EUVD
EUVD-2026-76984

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a SQL injection flaw in GongShengyue OnlineBooks. It exists in the listSplit interface of the BooksServlet.java file. The issue occurs because the 'column' parameter is directly used in SQL queries without proper sanitization, allowing attackers to manipulate the query and execute unauthorized commands.

Detection Guidance

To detect this SQL injection vulnerability in GongShengyue OnlineBooks, you can test the BooksServlet/listSplit interface by sending crafted requests with the 'column' parameter. Use tools like curl or sqlmap to inject payloads such as ' OR 1=1 -- or time-delay payloads like ' OR (SELECT * FROM (SELECT(SLEEP(5)))a) --. Monitor for unusual database responses or delays.

Impact Analysis

An attacker could exploit this to access sensitive database information, modify or delete data, or perform other unauthorized actions. The attack can be executed remotely, and since the exploit is public, the risk is higher. Systems using this software may face data breaches or integrity issues.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. Non-compliance may result in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Immediately update the application to a patched version if available. If not, apply input validation to sanitize the 'column' parameter in the BooksServlet.java file. Replace direct SQL query concatenation with parameterized queries in the BooksDAOImpl.java file. Restrict database user permissions to limit potential damage from SQL injection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90511. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart