CVE-2024-12481

The CVE-2024-12481 issue affects cjbi wetech-cms versions 1.0–1.2, specifically the findUser function in UserDao.java. The root cause is improper handling of arguments (searchValue, gId, rId) leading to SQL injection. Exploitation is possible remotely, and disclosures/Public exploits are noted. T...