3 matches found
CVE-2024-33153
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the commentList function...
8.3AI score0.00557EPSS
SaveExploits0References1
CVE-2024-33153
J2EEFAST v2.7.0 contains a SQL injection vulnerability caused by a lack of validation on the sql_filter parameter within the commentList() function. An attacker can exploit this flaw to execute unauthorized SQL commands and steal sensitive database information. As no patched version is currently ...
9.8CVSS8.2AI score0.00557EPSS
SaveExploits0References1Affected Software1
20