Lucene search
K

33 matches found

Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.7 views

PT-2024-26313 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within SysMsgPushMapper.xml. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the findPage function in SysMsgPushMapper.xm...

9.8CVSS8.3AI score0.00421EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.3 views

PT-2024-26312 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the findPage function in SysLoginInfoMapper.xml. This allows for potential exploitation. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to...

8.8CVSS8AI score0.00405EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.6 views

PT-2024-26317 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function in SysTenantMapper.xml, which can be exploited. Recommendations: For version 2.7.0, consider disabling the findPage function in SysTenantMapper.xml...

9.8CVSS8AI score0.00421EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.6 views

PT-2024-26315 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within BpmTaskFromMapper.xml. Recommendations: For version 2.7.0, consider restricting access to the findPage function in BpmTaskFromMapper.xml until...

9.8CVSS8.3AI score0.00534EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.6 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the SysOperLogMapper.xml findPage...

6.3CVSS8.2AI score0.00254EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.4 views

PT-2024-26311 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the findPage function in SysOperLogMapper.xml. This allows for potential exploitation. No information is provided about the estimated number of affected devices or...

6.3CVSS8.1AI score0.00254EPSS
Exploits0References4
CNVD
CNVD
added 2024/05/10 12:0 a.m.7 views

J2EEFAST findpage function SQL injection vulnerability

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the findpage function of the...

7.5CVSS8AI score0.00514EPSS
Exploits0References1
NVD
NVD
added 2024/05/07 4:15 p.m.10 views

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

7.5CVSS7.8AI score0.00514EPSS
Exploits0References1
OSV
OSV
added 2024/05/07 4:15 p.m.0 views

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

7.5CVSS5.8AI score0.00514EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/07 12:0 a.m.4 views

PT-2024-25127 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the sql filter parameter in the findpage function. This allows for potential exploitation. No information is provided about the estimated number of potentially...

7.5CVSS8.1AI score0.00514EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/05/07 12:0 a.m.16 views

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

8.1AI score0.00514EPSS
Exploits0References1
CVE
CVE
added 2024/05/07 12:0 a.m.55 views

CVE-2024-33139

J2EEFAST v2.7.0 contains an SQL injection vulnerability in the findpage function, via the sql_filter parameter, due to lack of input validation. The issue could allow unauthorized access to or disclosure of database data (confidentiality impact). Documented in multiple sources (e.g., CVE-2024-331...

7.5CVSS8.2AI score0.00514EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.3 views

J2eeFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the findpage function of the...

7.5CVSS8.2AI score0.00514EPSS
Exploits0References2
Rows per page
Query Builder