CVE-2024-24110

The crmeb_java e-commerce management system (versions prior to v1.3.4 ) is vulnerable to an SQL Injection flaw (CWE-89). An attacker can execute arbitrary SQL commands by sending a crafted GET request to the /api/front/spread/people component. This vulnerability potentially allows for unauthorize...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...