CVE-2024-33144

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml...

CVE-2024-33144

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml...

CVE-2024-33144

J2EEFAST v2.7.0 is affected by a SQL injection vulnerability caused by a lack of validation on external input for the sql_filter parameter. This occurs within the findApplyedTasksPage function in the BpmTaskMapper.xml file. An attacker can exploit this flaw to execute unauthorized SQL commands, p...