CVE-2024-33148

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the list function...

CVE-2024-33153: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the commentList function...

CVE-2024-33147

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authRoleList function...

PT-2024-25133 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: The issue is related to a SQL injection vulnerability. It occurs via the sql filter parameter in the myProcessList function. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the...

CVE-2024-33148

J2EEFAST v2.7.0 is vulnerable to a SQL injection vulnerability located in the list function via the sql_filter parameter. The root cause is a lack of validation of external input SQL statements, which could allow an attacker to execute illegal SQL commands and steal sensitive database data. As of...

CVE-2024-33153

J2EEFAST v2.7.0 contains a SQL injection vulnerability caused by a lack of validation on the sql_filter parameter within the commentList() function. An attacker can exploit this flaw to execute unauthorized SQL commands and steal sensitive database information. As no patched version is currently ...

CVE-2024-33164

J2EEFAST v2.7.0 is vulnerable to a SQL injection vulnerability within the authUserList() function. The root cause is a lack of proper validation for external input provided via the sql_filter parameter. An attacker can exploit this flaw to execute unauthorized SQL commands and potentially steal s...

CVE-2024-33164

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authUserList function...

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the list function of the sqlfilter...

CVE-2024-33155

J2EEFAST v2.7.0 contains a SQL injection vulnerability within the getDeptList() function. The root cause is a lack of external input SQL statement validation in the sql_filter parameter. An attacker can exploit this to execute unauthorized SQL commands and steal sensitive database data. As a temp...

CVE-2024-33155

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the getDeptList function...

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the unallocatedList function of the...

PT-2024-25138 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: The issue is related to a SQL injection vulnerability. It occurs via the sql filter parameter in the unallocatedList function. This allows for potential exploitation. Recommendations: For J2EEFAST version...

CVE-2024-33144: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml...

CVE-2024-33149: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the myProcessList function...

CVE-2024-33153

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the commentList function...

CVE-2024-33147: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authRoleList function...

CVE-2023-2476

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...

Cross site scripting

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument ????/???? leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2023-2476 Dromara J2eeFAST Announcement cross site scripting

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...