CVE-2024-6438

A vulnerability has been found in Hitout Carsale 1.0 and classified as critical. This vulnerability affects unknown code of the file OrderController.java. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-6438

CVE-2024-6438 affects Hitout Carsale 1.0. The vulnerability resides in OrderController.java where manipulating the orderBy parameter leads to a SQL injection. Exploitation is remote and publicly disclosed (VDB-270166). Multiple connected records corroborate the issue with similar wording across N...

CVE-2024-6438 Hitout Carsale OrderController.java sql injection

A vulnerability has been found in Hitout Carsale 1.0 and classified as critical. This vulnerability affects unknown code of the file OrderController.java. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...