Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.
Metrics
Affected Vendors & Products
References
History
Mon, 09 Dec 2024 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Tue, 03 Dec 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Jepaas
Jepaas jepaas |
|
Weaknesses | CWE-89 | |
CPEs | cpe:2.3:a:jepaas:jepaas:*:*:*:*:*:*:*:* | |
Vendors & Products |
Jepaas
Jepaas jepaas |
|
Metrics |
cvssV3_1
|
Fri, 15 Nov 2024 15:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-11-15T00:00:00
Updated: 2024-12-09T16:37:00.331996Z
Reserved: 2024-10-28T00:00:00
Link: CVE-2024-51164
Vulnrichment
Updated: 2024-12-03T16:39:02.055Z
NVD
Status : Awaiting Analysis
Published: 2024-11-15T16:15:37.057
Modified: 2024-12-09T17:15:09.107
Link: CVE-2024-51164
Redhat
No data.