CVE-2024-33146

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the export function...

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

CVE-2024-33146

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the export function...

J2eeFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the findpage function of the...

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

CVE-2024-33161

The Java EE enterprise-class rapid development platform J2EEFAST v2.7.0 contains a SQL injection vulnerability. The root cause is a lack of validation for external input SQL statements within the sql_filter parameter used in the unallocatedList() function. An attacker can exploit this flaw to exe...

PT-2024-25132 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: The issue is related to a SQL injection vulnerability. It occurs via the sql filter parameter in the list function. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the list...

PT-2024-25139 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in J2EEFAST via the sql filter parameter in the authUserList function. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the authUserList function...

CVE-2024-33147

The J2EEFAST v2.7.0 Java EE enterprise-class rapid development platform contains a SQL injection vulnerability within the authRoleList function. The root cause is a lack of external input SQL statement validation in the sql_filter parameter. An attacker can exploit this flaw to execute unauthoriz...

CVE-2024-33155

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the getDeptList function...

CVE-2024-33144

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml...

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . A SQL injection vulnerability exists in J2EEFAST v2.7.0, which is caused by the lack of validation of the sqlfilter parameter...

PT-2024-25127 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the sql filter parameter in the findpage function. This allows for potential exploitation. No information is provided about the estimated number of potentially...

CVE-2024-33144

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml...

CVE-2024-33144

J2EEFAST v2.7.0 is affected by a SQL injection vulnerability caused by a lack of validation on external input for the sql_filter parameter. This occurs within the findApplyedTasksPage function in the BpmTaskMapper.xml file. An attacker can exploit this flaw to execute unauthorized SQL commands, p...

PT-2024-25135 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was discovered via the sql filter parameter in the commentList function. This allows for potential exploitation. Recommendations: For J2EEFAST version 2.7.0, consider restricting acces...

CVE-2024-33139

J2EEFAST v2.7.0 is vulnerable to a SQL injection flaw within the findpage function. The root cause is a lack of validation for external input provided via the sql_filter parameter. An attacker could exploit this vulnerability to execute unauthorized SQL commands, potentially leading to the theft ...

CVE-2024-33161

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the unallocatedList function...

CVE-2024-33164: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authUserList function...