CVE-2024-33139

J2EEFAST v2.7.0 contains an SQL injection vulnerability in the findpage function, via the sql_filter parameter, due to lack of input validation. The issue could allow unauthorized access to or disclosure of database data (confidentiality impact). Documented in multiple sources (e.g., CVE-2024-331...

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...