CVE-2024-46535

creationtimestamp| type| source ---|---|--- 2024-10-14 20:01:12+00:00| seen| https://t.me/cvedetector/7828...

CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg...

CVE-2024-46535

The Jepaas rapid development platform, specifically version 7.2.8 , contains a SQL injection vulnerability (CWE-89) in the orderSQL parameter at the /homePortal/loadUserMsg API endpoint. The root cause is a lack of proper validation for externally entered SQL statements, which could allow an atta...

CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg...