CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

CVE-2024-33139

J2EEFAST v2.7.0 is vulnerable to a SQL injection flaw within the findpage function. The root cause is a lack of validation for external input provided via the sql_filter parameter. An attacker could exploit this vulnerability to execute unauthorized SQL commands, potentially leading to the theft ...