CVE-2024-28714

SQL Injection vulnerability in CRMEBJava e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter...

CVE-2024-28714

The CRMEB_Java e-commerce system (version 1.3.4 ) contains an SQL Injection vulnerability. An attacker can exploit this flaw via the groupid parameter to execute arbitrary code, which may lead to unauthorized access and data manipulation. As of the provided documents, no patched version has been ...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

Sql injection

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-24110

The crmeb_java e-commerce management system (versions prior to v1.3.4 ) is vulnerable to a SQL Injection flaw. Attackers can execute arbitrary SQL commands by sending a crafted GET request to the /api/front/spread/people component. This vulnerability allows for unauthorized database manipulation,...

CVE-2024-24110: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-25469

The CRMEB crmeb_java e-commerce management system (versions 1.3.4 and earlier ) is susceptible to an SQL Injection vulnerability. A remote attacker can exploit this flaw by leveraging the latitude and longitude parameters within the api/front/store/list component to obtain sensitive information. ...

CVE-2024-25469

SQL Injection vulnerability in CRMEB crmebjava v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component...

CVE-2024-25469

SQL Injection vulnerability in CRMEB crmebjava v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component...

CVE-2024-25469: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in CRMEB crmebjava v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component...