cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
CWE-89