Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/19 12:00 a.m.•1 views

CVE-2024-46382: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java...

7.5CVSS5.9AI score0.00626EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/27 5:15 p.m.•22 views

Sql injection

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...

7.6AI score0.00719EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/27 12:00 a.m.•4099 views

CVE-2024-24323

A SQL injection vulnerability exists in linlinjava litemall v.1.8.0 within the AdminOrdercontroller.java component. A remote attacker can exploit this flaw by manipulating the nickname, consignee, orderSN, and orderStatusArray parameters to obtain sensitive information from the database. To mitig...

7.2CVSS7.2AI score0.00719EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/27 12:00 a.m.•1 views

CVE-2024-24323: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...

7.2CVSS6AI score0.00719EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/02/27 12:00 a.m.•13 views

CVE-2024-24323

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...

7.6AI score0.00719EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/27 12:00 a.m.•46 views

CVE-2024-24323

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...

7.2AI score0.00719EPSS
SaveExploits1References1
Rows per page
Query Builder