ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-28714
8.1высокая

CVE-2024-28714

Описание

SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.

Затрагиваемое ПО
Crmeb Crmeb java
CVSS
Балл8.1 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Источники
https://gitee.com/ZhongBangKeJi/crmeb_javahttps://github.com/JiangXiaoBaiJia/cve2/blob/main/1.mdhttps://github.com/JiangXiaoBaiJia/cve2/blob/main/a.pnghttps://gitee.com/ZhongBangKeJi/crmeb_javahttps://github.com/JiangXiaoBaiJia/cve2/blob/main/1.mdhttps://github.com/JiangXiaoBaiJia/cve2/blob/main/a.pnghttps://www.vicarius.io/vsociety/posts/ssti-in-mblog-351-a-tale-of-a-glorified-rce-cve-2024-28713-28714