3 matches found
CVE-2024-35083
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml...
8.8CVSS5.8AI score0.00405EPSS
SaveExploits0References2
CVE-2024-35083
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml...
8.8CVSS7.8AI score0.00405EPSS
SaveExploits0References2
CVE-2024-35083
The J2EEFAST enterprise-class rapid development platform (version 2.7.0 ) contains a SQL injection vulnerability. The root cause is a lack of validation for external input SQL statements within the findPage function located in the SysLoginInfoMapper.xml file. An attacker can exploit this flaw to ...
8.8CVSS8.2AI score0.00405EPSS
SaveExploits0References2Affected Software1
20