CVE-2024-57769: Improper Neutralization of Special Elements used in an SQL Command

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser...

PT-2025-3563

Name of the Vulnerable Software and Affected Versions JFinalOA versions prior to 2025.01.01 Description The issue is related to a SQL injection vulnerability. It can be exploited via the borrowmoney/listData?applyUser component. There is no information provided about the estimated number of...

CVE-2024-57769

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser...

CVE-2024-57769

CVE-2024-57769 affects JFinalOA prior to 2025.01.01, where a SQL injection flaw exists in the component borrowmoney/listData?applyUser . The issue is caused by improper handling of user input in this endpoint, enabling high-severity (C/H, I/H, A/H) impact per CVSS 3.1 with NETWORK attack vector, ...