CVE-2024-8150

CVE-2024-8150 affects ContiNew Admin 3.2.0. The vulnerability is in top.continew.starter.extension.crud.controller.BaseController#page for /api/system/user?deptId=1&page=1&size=10, where improper handling of the sort parameter enables SQL injection. The issue may be exploitable remotely. Vendor r...

CVE-2024-8150 ContiNew Admin user sql injection

A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection...

PT-2024-38837 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin version 3.2.0 Description: A critical issue was found in ContiNew Admin, affecting the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The...

ContiNew Admin SQL注入漏洞

ContiNew Admin is ContiNew open source a continuous iterative optimization of the front-end and back-end separation of the middle and back-end management system framework. ContiNew Admin version 3.2.0 SQL injection vulnerability exists , the vulnerability stems from the file...

ContiNew Admin SQL注入漏洞

ContiNew Admin is ContiNew open source a continuous iterative optimization of front-end and back-end separation of middle and back-end management system framework. A SQL injection vulnerability exists in ContiNew Admin version 3.2.0, which stems from the operation of the parameter sort that can...

PT-2024-38842 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin version 3.2.0 Description: A critical vulnerability was found in ContiNew Admin, affecting the function top.continew.starter.extension.crud.controller.BaseControllertree of the file...