2 matches found
CVE-2024-12480 cjbi wetech-cms TopicDao.java searchTopic sql injection
A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been classified as critical. Affected is the function searchTopic of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\TopicDao.java. The manipulation of the argument con leads to sql injection. It is possible...
6.5CVSS7.2AI score0.00535EPSS
SaveExploits1References4
PT-2024-17613 · Unknown · Wetech-Cms
Name of the Vulnerable Software and Affected Versions: cjbi wetech-cms versions 1.0 through 1.2 Description: A critical issue has been found, affecting the searchTopic function in the TopicDao.java file. The manipulation of the con argument leads to SQL injection, allowing for remote attacks. The...
8.8CVSS6.7AI score0.00535EPSS
SaveExploits1References8
20