Unrated severityNVD Advisory· Published Aug 26, 2026

CVE-2026-75330

Description

The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split() and string concatenation without being parameterized and bound.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fangtang7/super-diamond-serverllm-create
Range: <=1.3.3

Patches

Vulnerability mechanics

References

github.com/fangtang7/CVE/blob/main/super-diamond/SQLI-HTTP.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000