CVE-2024-24110

The crmeb_java e-commerce management system (versions prior to v1.3.4 ) is vulnerable to a SQL Injection flaw. Attackers can execute arbitrary SQL commands by sending a crafted GET request to the /api/front/spread/people component. This vulnerability allows for unauthorized database manipulation,...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...

CVE-2024-24110

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...