8 matches found
JeecgBoot v3.7.1 - SQL Injection
The JeecgBoot application is vulnerable to SQL Injection via the getTotalData endpoint. An attacker can exploit this vulnerability to extract sensitive information from the database by injecting SQL commands. id: CVE-2024-48307 info: name: JeecgBoot v3.7.1 - SQL Injection author: lbb,s4e-io...
CVE-2023-48307
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextcloud Mail app versions 2.2.8 and 3.3.0 contain a patch for...
CVE-2024-48307
creationtimestamp| type| source ---|---|--- 2024-10-31 02:44:13+00:00| seen| https://t.me/cvedetector/9482 2024-12-09 19:07:44+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-48307.yaml 2025-01-23 00:00:00+00:00| seen| The Shadowserver...
CVE-2024-48307
The JeecgBoot Java low-code platform (version v3.7.1 ) is vulnerable to a SQL injection flaw within the /onlDragDatasetHead/getTotalData component. An unauthenticated attacker can exploit this vulnerability to execute arbitrary SQL commands and extract sensitive information from the database. Whi...
CVE-2022-48307
creationtimestamp| type| source ---|---|--- 2023-02-16 18:12:24+00:00| seen| https://t.me/cibsecurity/58319...
CVE-2022-48307
It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack...
CVE-2022-48307
It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack...
CVE-2022-48307
The CVE-2022-48307 entry concerns Magritte-ftp where hostnames were not verified in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. This allowed a network-positioned attacker to perform a man-in-the-middle attack, intercepting and potentially reading or modifying traff...