SQL Injection Vulnerability in Dromara Skyeye Product

CVE-2026-110609

What is CVE-2026-110609?

Dromara Skyeye has a vulnerability that permits authenticated low-privileged users to exploit SQL injection through the keyword parameter. This occurs within the queryErpOrderItem MyBatis statement, utilizing raw ${} substitution. Attackers can craft specific keyword inputs to access sensitive database information via endpoints such as queryWarehousingDetails and queryOutgoingDetails. Exploiting this vulnerability can lead to data leakage, including access to data from other tenants, using techniques such as boolean, UNION, error, or time-based attacks.

References