com.github.pagehelper vulnerabilities

Products

• com.github.pagehelper/pagehelper 1

Latest com.github.pagehelper CVEs

Newest publication first

1. CVE-2022-28111 MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter

   Published 2022-05-04

   Critical·CVSS 9.8 EPSS 1.7% PoC

   MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.