5 matches found
CVE-2024-57437
RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list...
CVE-2024-57437
creationtimestamp| type| source ---|---|--- 2025-01-29 14:20:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113912080915386342 2025-01-29 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb67j2hl2p 2025-01-29 17:21:30+00:00| seen|...
CVE-2024-57437
RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list...
CVE-2024-57437
The backend management system RuoYi v4.8.0 contains a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements in the orderby parameter at the /monitor/online/list API endpoint. This vulnerability allows for unauthorized database interaction. As a temporary worka...
