2 matches found
CVE-2024-51164
Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB...
9.1CVSS5.9AI score0.00747EPSS
SaveExploits1References3
CVE-2024-51164: Improper Neutralization of Special Elements used in an SQL Command
Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB...
9.1CVSS6AI score0.00747EPSS
SaveExploits1References1
20