PT-2025-15301 · Jalios · Jalios Jplatform

Name of the Vulnerable Software and Affected Versions: Jalios JPlatform versions prior to 10.0.6 Description: The DB chooser functionality in Jalios JPlatform improperly neutralizes special elements used in an SQL command, allowing authenticated administrative users to trigger SQL Injection. A...

CVE-2025-0942: Improper Neutralization of Special Elements used in an SQL Command

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06...