CVE-2024-12481: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

CVE-2024-12481

The CVE-2024-12481 issue affects cjbi wetech-cms versions 1.0–1.2, specifically the findUser function in UserDao.java. The root cause is improper handling of arguments (searchValue, gId, rId) leading to SQL injection. Exploitation is possible remotely, and disclosures/Public exploits are noted. T...

CVE-2024-12481 cjbi wetech-cms UserDao.java findUser sql injection

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

CVE-2024-12481 cjbi wetech-cms UserDao.java findUser sql injection

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

PT-2024-17614 · Cjbi · Wetech-Cms

Name of the Vulnerable Software and Affected Versions: cjbi wetech-cms versions 1.0 through 1.2 Description: A critical issue has been found, affecting the findUser function in the UserDao.java file. The manipulation of the searchValue, gId, or rId arguments leads to SQL injection. This issue can...

DIVOTECH Dot Tech Smart Campus System 安全漏洞

DIVOTECH Dot Tech Smart Campus System is a smart campus system from China-based DIVOTECH. A security vulnerability exists in version 1.0 of the DIVOTECH Dot Tech Smart Campus System, which stems from a problem with an unknown function in the file /services/Card/findUser, which could lead to...

PT-2022-26589 · Dot Tech · Dot Tech Smart Campus System

Name of the Vulnerable Software and Affected Versions: Dot Tech Smart Campus System affected versions not specified Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /services/Card/findUser. This leads to information disclosure and can...

CVE-2022-4280: Incorrect Privilege Assignment

A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this issue is some unknown functionality of the file /services/Card/findUser. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has be...

CVE-2014-3827

Multiple cross-site scripting XSS vulnerabilities in the MyBB aka MyBulletinBoard before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the title parameter in the 1 edit or 2 add action in the user-users module or the 3 finduser action or the name parameter in a...