CVE-2025-6738 | huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a UserServiceImpl.java userDao.selectUserByUserNameLike Username sql injection

June 26, 2025 Yanac

A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads to sql injection.

This vulnerability is handled as CVE-2025-6738. The attack may be launched remotely. Furthermore, there is an exploit available.

This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.VulDB Recent EntriesRead More