CVE-2024-0302

CVE-2024-0302 affects fhs-opensource iparking 1.5.22.RELEASE. A deserialization flaw in the processing of the file /vueLogin allows remote exploitation; the exploit has been disclosed publicly. Remediation: PT-2024-15453 suggests restricting access to /vueLogin as a temporary workaround since no ...

CVE-2024-0301

CVE-2024-0301 affects fhs-opensource iparking 1.5.22.RELEASE. The flaw is in the Java method getData of src/main/java/com/xhb/pay/action/PayTempOrderAction.java, causing an SQL injection. The vulnerability enables remote initiation and the exploit has been disclosed publicly. Multiple sources (NV...