Description
bootplus是JoeyBling个人开发者的一个权限管理框架。 bootplus存在注入漏洞，该漏洞源于文件/admin/sys/menu/list的参数sort/order会导致SQL注入。
bootplus 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-0699
https://github.com/advisories/GHSA-9m28-gm8r-8h2p
https://vuldb.com/?id.293226
https://blog.csdn.net/shelter1234567/article/details/147951478
https://cn-sec.com/archives/3690894.html
https://www.cve.org/CVERecord?id=CVE-2025-0698