CVE-2024-48235

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file...

PT-2024-25773 · Ofcms · Ofcms

Name of the Vulnerable Software and Affected Versions: OFCMS version 1.1.2 Description: The issue allows for SQL Injection via the new table function. Recommendations: For OFCMS version 1.1.2, update to a version that fixes this issue, however at the moment, there is no information about a newer...