220 matches found
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35091
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml...
CVE-2024-35091
J2EEFAST v2.7.0 is vulnerable to a SQL injection flaw within the findPage function of the SysTenantMapper.xml file. The root cause is a lack of external input SQL statement validation , which could allow an attacker to execute illegal SQL commands and steal sensitive database data . While no patc...
CVE-2024-35091
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml...
CVE-2024-35091
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35086
The J2EEFAST enterprise-class rapid development platform version 2.7.0 is vulnerable to a SQL injection vulnerability. The root cause is a lack of external input SQL statement validation within the findPage function located in the BpmTaskFromMapper.xml file. An attacker can exploit this flaw to e...
CVE-2024-35082
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...
CVE-2024-35082
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...
CVE-2024-35082
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...
CVE-2024-35082
The J2EEFAST v2.7.0 Java EE enterprise-class rapid development platform contains a SQL injection vulnerability. The root cause is a lack of external input SQL statement validation within the findPage function in SysOperLogMapper.xml . An attacker can exploit this flaw to execute unauthorized SQL ...
CVE-2024-35084
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml...
CVE-2024-35084
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml...
CVE-2024-35084
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml...
CVE-2024-35084
The J2EEFAST rapid development platform (version 2.7.0 ) contains a SQL injection vulnerability located in the findPage function within the SysMsgPushMapper.xml file. The root cause is a lack of proper validation for external inputs in SQL statements. An attacker can exploit this weakness to exec...
CVE-2024-35085
J2EEFAST version 2.7.0 is vulnerable to a SQL injection vulnerability within the findPage function located in ProcessDefinitionMapper.xml . The root cause is a lack of validation for external input SQL statements, which could allow an attacker to execute unauthorized SQL commands and steal sensit...