CVE-2024-24004

creationtimestamp| type| source ---|---|--- 2024-02-07 01:26:47+00:00| seen| https://t.me/ctinow/180459 2024-02-09 08:16:31+00:00| seen| https://t.me/ctinow/181838 2024-03-01 15:16:48+00:00| seen| https://t.me/ctinow/197690...

CVE-2024-24004

CVE-2024-24004 affects jshERP v3.3. The vulnerability arises in com.jsh.erp.controller.DepotHeadController.findInOutDetail() where safeSqlParse does not properly filter the column and order parameters, enabling SQL injection by crafting a malicious payload. Impact is described as high/critical (C...