CVE-2024-5350

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-5350

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-5350 anji-plus AJ-Report pageList sql injection

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-5350

CVE-2024-5350 affects the anji-plus AJ-Report product family up to version 1.4.1, specifically the pageList function and its p parameter. The root cause is a SQL injection vulnerability that can be exploited remotely, and multiple sources indicate that the exploit has been disclosed publicly. Con...

CVE-2024-5350 anji-plus AJ-Report pageList sql injection

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

PT-2024-35762 · Unknown · Anji-Plus Aj-Report

Name of the Vulnerable Software and Affected Versions: anji-plus AJ-Report versions up to 1.4.1 Description: A critical issue has been found, affecting the pageList function of the file /pageList. The manipulation of the argument p leads to SQL injection, allowing for remote attacks...

CVE-2024-5350: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2022-42983

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...

CVE-2022-42983

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...

CVE-2022-42983: Authentication Bypass by Spoofing

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...

CVE-2022-42983

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...

CVE-2022-42983

CVE-2022-42983 affects anji-plus AJ-Report 0.9.8.6. The issue allows remote attackers to bypass login authentication by spoofing JWT Tokens. Impact is described as high (CVE entry indicates Network attack vector, low complexity, required privileges, no user interaction; confidentiality, integrity...

PT-2022-26693 · Unknown · Anji-Plus Aj-Report

Name of the Vulnerable Software and Affected Versions: anji-plus AJ-Report version 0.9.8.6 Description: The issue allows remote attackers to bypass login authentication by spoofing JWT Tokens. This can be exploited by attackers to gain unauthorized access to the system. Recommendations: For...

CVE-2022-42983

anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...

anji-plus AJ-Report 安全漏洞

AJ-Report is a fully open source, drag-and-drop editing visual design tool from anji-plus open source. A security vulnerability exists in anji-plus AJ-Report version 0.9.8.6, which stems from a vulnerability that allows remote attackers to bypass login authentication by spoofing JWT Tokens...