Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-24110 EUVD-2024-21535GHSA-4jgg-53cv-7j3q

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the compo…

Published Feb 29, 2024 · Updated Aug 5, 2024 · Assigned by mitre

Description

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

References