J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.

Published May 7, 2024 · Updated Aug 2, 2024 · Assigned by mitre