Description
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component.
High · 7.2
CVE-2024-24323
EUVD-2024-21745GHSA-hpw7-mvmj-35m8
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consi…
Published Feb 27, 2024 · Updated Aug 28, 2024 · Assigned by mitre