Lucene search

K
cvelistMitreCVELIST:CVE-2024-24323
HistoryFeb 27, 2024 - 12:00 a.m.

CVE-2024-24323

2024-02-2700:00:00
mitre
www.cve.org
3
cve-2024-24323
sql injection
remote attacker
sensitive information
adminordercontroller.java

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

9.0%

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component.

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-24323