A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function
LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/LoosController.java. The manipulation of the argument loosName leads to sql injection.
This vulnerability is handled as CVE-2025-0408. The attack may be launched remotely. Furthermore, there is an exploit available.
