33 matches found
J2EEFAST 安全漏洞
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the SysOperLogMapper.xml findPage...
PT-2024-26315 · J2Eefast · J2Eefast
Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within BpmTaskFromMapper.xml. Recommendations: For version 2.7.0, consider restricting access to the findPage function in BpmTaskFromMapper.xml until...
PT-2024-26313 · J2Eefast · J2Eefast
Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function within SysMsgPushMapper.xml. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the findPage function in SysMsgPushMapper.xm...
PT-2024-26317 · J2Eefast · J2Eefast
Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in the findPage function in SysTenantMapper.xml, which can be exploited. Recommendations: For version 2.7.0, consider disabling the findPage function in SysTenantMapper.xml...
PT-2024-26312 · J2Eefast · J2Eefast
Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the findPage function in SysLoginInfoMapper.xml. This allows for potential exploitation. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to...
PT-2024-26311 · J2Eefast · J2Eefast
Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the findPage function in SysOperLogMapper.xml. This allows for potential exploitation. No information is provided about the estimated number of affected devices or...
J2EEFAST findpage function SQL injection vulnerability
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the findpage function of the...
CVE-2024-33139
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...
CVE-2024-33139
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...
J2eeFAST 安全漏洞
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the findpage function of the...
CVE-2024-33139
J2EEFAST v2.7.0 is vulnerable to a SQL injection flaw within the findpage function. The root cause is a lack of validation for external input provided via the sql_filter parameter. An attacker could exploit this vulnerability to execute unauthorized SQL commands, potentially leading to the theft ...
CVE-2024-33139
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...
PT-2024-25127 · J2Eefast · J2Eefast
Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the sql filter parameter in the findpage function. This allows for potential exploitation. No information is provided about the estimated number of potentially...