3 matches found
CVE-2024-35082
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...
6.3CVSS7.8AI score0.00254EPSS
SaveExploits0References2
CVE-2024-35082
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...
7.8AI score0.00254EPSS
SaveExploits0References2
CVE-2024-35082
The J2EEFAST v2.7.0 Java EE enterprise-class rapid development platform contains a SQL injection vulnerability. The root cause is a lack of external input SQL statement validation within the findPage function in SysOperLogMapper.xml . An attacker can exploit this flaw to execute unauthorized SQL ...
6.3CVSS8.2AI score0.00254EPSS
SaveExploits0References2Affected Software1
20