4 matches found
CVE-2024-33146
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the export function...
9.1CVSS5.8AI score0.0052EPSS
SaveExploits0References1
CVE-2024-33146
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the export function...
9.1CVSS7.8AI score0.0052EPSS
SaveExploits0References1
CVE-2024-33146
The J2EEFAST rapid development platform version 2.7.0 is susceptible to a SQL injection vulnerability (CWE-89). The root cause is a lack of validation for external input within the export function 's sql_filter parameter. An attacker could exploit this to execute illegal SQL commands and steal se...
9.1CVSS8.2AI score0.0052EPSS
SaveExploits0References1Affected Software1
20