4 matches found
CVE-2024-28714
SQL Injection vulnerability in CRMEBJava e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter...
8.1CVSS8.8AI score0.00849EPSS
SaveExploits1References1
CVE-2024-28714
SQL Injection vulnerability in CRMEBJava e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter...
8.7AI score0.00849EPSS
SaveExploits1References3
CVE-2024-28714
The CRMEB_Java e-commerce system (version 1.3.4 ) contains an SQL Injection vulnerability. An attacker can exploit this flaw via the groupid parameter to execute arbitrary code, which may lead to unauthorized access and data manipulation. As of the provided documents, no patched version has been ...
8.1CVSS8.7AI score0.00849EPSS
SaveExploits1References4Affected Software1
20