2 matches found
CVE-2024-57769: Improper Neutralization of Special Elements used in an SQL Command
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser...
8.8CVSS5.8AI score0.00607EPSS
SaveExploits1References1
PT-2025-3563
Name of the Vulnerable Software and Affected Versions JFinalOA versions prior to 2025.01.01 Description The issue is related to a SQL injection vulnerability. It can be exploited via the borrowmoney/listData?applyUser component. There is no information provided about the estimated number of...
8.8CVSS5.7AI score0.00607EPSS
SaveExploits1References6
20