CVE-2024-12481: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

CVE-2024-12481 cjbi wetech-cms UserDao.java findUser sql injection

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

CVE-2024-12481 cjbi wetech-cms UserDao.java findUser sql injection

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

CVE-2024-12481

The CVE-2024-12481 issue affects cjbi wetech-cms versions 1.0–1.2, specifically the findUser function in UserDao.java. The root cause is improper handling of arguments (searchValue, gId, rId) leading to SQL injection. Exploitation is possible remotely, and disclosures/Public exploits are noted. T...

CVE-2024-12481

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\UserDao.java. The manipulation of the argument searchValue/gId/rId leads ...

PT-2024-17614 · Cjbi · Wetech-Cms

Name of the Vulnerable Software and Affected Versions: cjbi wetech-cms versions 1.0 through 1.2 Description: A critical issue has been found, affecting the findUser function in the UserDao.java file. The manipulation of the searchValue, gId, or rId arguments leads to SQL injection. This issue can...

PT-2022-26589 · Dot Tech · Dot Tech Smart Campus System

Name of the Vulnerable Software and Affected Versions: Dot Tech Smart Campus System affected versions not specified Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /services/Card/findUser. This leads to information disclosure and can...

DIVOTECH Dot Tech Smart Campus System 安全漏洞

DIVOTECH Dot Tech Smart Campus System is a smart campus system from China-based DIVOTECH. A security vulnerability exists in version 1.0 of the DIVOTECH Dot Tech Smart Campus System, which stems from a problem with an unknown function in the file /services/Card/findUser, which could lead to...

CVE-2022-4280: Incorrect Privilege Assignment

A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this issue is some unknown functionality of the file /services/Card/findUser. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has be...

CVE-2014-3827

Multiple cross-site scripting XSS vulnerabilities in the MyBB aka MyBulletinBoard before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the title parameter in the 1 edit or 2 add action in the user-users module or the 3 finduser action or the name parameter in a...