CVE-2024-33161

The Java EE enterprise-class rapid development platform J2EEFAST v2.7.0 contains a SQL injection vulnerability. The root cause is a lack of validation for external input SQL statements within the sql_filter parameter used in the unallocatedList() function. An attacker can exploit this flaw to exe...