CVE-2024-35085

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml...

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

CVE-2024-35090

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...

CVE-2024-35090

The J2EEFAST rapid development platform (version v2.7.0 ) contains a SQL injection vulnerability in the findPage function within SysUreportFileMapper.xml. The root cause is a lack of validation for external input SQL statements. An attacker can exploit this flaw to execute illegal SQL commands an...

CVE-2024-35083

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml...

CVE-2024-35083

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml...

CVE-2024-35083

The J2EEFAST enterprise-class rapid development platform (version 2.7.0 ) contains a SQL injection vulnerability. The root cause is a lack of validation for external input SQL statements within the findPage function located in the SysLoginInfoMapper.xml file. An attacker can exploit this flaw to ...

CVE-2024-35083

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml...

CVE-2024-35091: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml...

CVE-2024-35086: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...

CVE-2024-35085: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml...

CVE-2024-35083: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml...

CVE-2024-35082: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...

PT-2024-26313 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within SysMsgPushMapper.xml. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the findPage function in SysMsgPushMapper.xm...

PT-2024-26316 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within SysUreportFileMapper.xml. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the findPage function in...

PT-2024-26314 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within ProcessDefinitionMapper.xml. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the findPage function in...

J2EEFAST security vulnerabilities

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the BpmTaskFromMapper.xml findPage...

J2EEFAST security vulnerabilities

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the SysUreportFileMapper.xml findPa...

PT-2024-26311 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the findPage function in SysOperLogMapper.xml. This allows for potential exploitation. No information is provided about the estimated number of affected devices or...