CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2024/02/27 5:15 p.m.•12 views

Sql injection

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...

7.6AI score0.00758EPSS

Exploits1References1

Cvelist•added 2024/02/27 12:0 a.m.•14 views

CVE-2024-24323

7.2AI score0.00758EPSS

Exploits1References1

CVE•added 2024/02/27 12:0 a.m.•4049 views

CVE-2024-24323

CVE-2024-24323 is a SQL injection vulnerability affecting linlinjava litemall v.1.8.0. The issue arises in AdminOrdercontroller.java where the nickname, consignee, orderSN, and orderStatusArray parameters can be exploited by an attacker to access sensitive information. Multiple sources (NVD, Red ...

7.2CVSS7.2AI score0.00758EPSS

Exploits1References1Affected Software1