8 matches found
EUVD-2024-30909
Malicious code in bioql PyPI...
CVE-2024-33164
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authUserList function...
J2EEFAST authUserList Function SQL Injection Vulnerability
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version exists SQL injection vulnerability , the vulnerability stems from the authUserList function in the...
CVE-2024-33164
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authUserList function...
CVE-2024-33164
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authUserList function...
CVE-2024-33164
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authUserList function...
CVE-2024-33164
J2EEFAST v2.7.0 contains a SQL injection vulnerability within the authUserList() function. The root cause is a lack of external input SQL statement validation for the sql_filter parameter. An attacker can exploit this flaw to execute unauthorized SQL commands and steal sensitive database data. Wh...