PT-2024-17614 · Cjbi · Wetech-Cms

Name of the Vulnerable Software and Affected Versions: cjbi wetech-cms versions 1.0 through 1.2 Description: A critical issue has been found, affecting the findUser function in the UserDao.java file. The manipulation of the searchValue, gId, or rId arguments leads to SQL injection. This issue can...