CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg...

CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg...

CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg...

JEPaaS 安全漏洞

JEPaaS is a rapid development platform from China Kate Weiye JEPaaS. A SQL injection vulnerability exists in JEPaaS v7.2.8, which originates from the lack of validation of the orderSQL parameter of /homePortal/loadUserMsg for externally entered SQL statements. An attacker can exploit this...

CVE-2024-46535

Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg...

CVE-2024-46535

The rapid development platform Jepaas v7.2.8 is vulnerable to a SQL injection vulnerability located at the /homePortal/loadUserMsg API endpoint. The root cause is a lack of validation for the orderSQL parameter, which allows for the execution of illegal SQL commands from external sources. An atta...