CVE-2024-33148

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the list function...

CVE-2024-33148

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the list function...

CVE-2024-33148

J2EEFAST v2.7.0 is vulnerable to a SQL injection vulnerability located in the list function via the sql_filter parameter. The root cause is a lack of validation of external input SQL statements, which could allow an attacker to execute illegal SQL commands and steal sensitive database data. As of...