From 5a6563c93257064dd17384cbd67cd996305c7132 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sun, 6 Apr 2025 15:31:58 +0000
Subject: [PATCH] Publish GHSA-5x84-fgc9-6qq4

---
 .../GHSA-5x84-fgc9-6qq4.json                  | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 advisories/unreviewed/2025/04/GHSA-5x84-fgc9-6qq4/GHSA-5x84-fgc9-6qq4.json

diff --git a/advisories/unreviewed/2025/04/GHSA-5x84-fgc9-6qq4/GHSA-5x84-fgc9-6qq4.json b/advisories/unreviewed/2025/04/GHSA-5x84-fgc9-6qq4/GHSA-5x84-fgc9-6qq4.json
new file mode 100644
index 00000000000..7ad520230d9
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-5x84-fgc9-6qq4/GHSA-5x84-fgc9-6qq4.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5x84-fgc9-6qq4",
+  "modified": "2025-04-06T15:30:33Z",
+  "published": "2025-04-06T15:30:33Z",
+  "aliases": [
+    "CVE-2025-3318"
+  ],
+  "details": "A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected by this vulnerability is the function page of the file src/main/java/com/controller/ShangpinleixingController.java. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3318"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/Kenj_Frog/company-financial-management/issues/IBM6D9"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303517"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303517"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-06T14:15:35Z"
+  }
+}
\ No newline at end of file