3 matches found
CVE-2024-25469
The CRMEB crmeb_java e-commerce management system (versions 1.3.4 and earlier ) is susceptible to an SQL Injection vulnerability. A remote attacker can exploit this flaw by leveraging the latitude and longitude parameters within the api/front/store/list component to obtain sensitive information. ...
CVE-2024-25469
SQL Injection vulnerability in CRMEB crmebjava v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component...
CVE-2024-25469
SQL Injection vulnerability in CRMEB crmebjava v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component...