CVE-2024-12480

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been classified as critical. Affected is the function searchTopic of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\TopicDao.java. The manipulation of the argument con leads to sql injection. It is possible...

CVE-2024-12480 cjbi wetech-cms TopicDao.java searchTopic sql injection

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been classified as critical. Affected is the function searchTopic of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\TopicDao.java. The manipulation of the argument con leads to sql injection. It is possible...

CVE-2024-12480

CVE-2024-12480 affects cjbi wetech-cms versions 1.0–1.2. The vulnerable component is the searchTopic function in TopicDao.java (wetech-core). The issue arises from manipulation of the con argument, enabling SQL injection with remote access. Public exploitation has been disclosed; the vendor did n...