A vulnerability labeled as critical has been found in erzhongxmu Jeewms up to 20241108. The affected element is an unknown function of the file cgReportController.do of the component AuthInterceptor. Executing manipulation of the argument begin_date can lead to sql injection.
This vulnerability is handled as CVE-2024-11251. The attack can be executed remotely. Additionally, an exploit exists.
This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.
Other parameters might be affected as well. This entry has a duplicate CVE-2024-53499 assigned.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2024-11251 | erzhongxmu Jeewms up to 20241108 AuthInterceptor cgReportController.do begin_date sql injection (Duplicate CVE-2024-53499 / IB2XZG)
A vulnerability labeled as critical has been found in erzhongxmu Jeewms up to 20241108. The affected element is an unknown function of the file cgReportController.do of the component AuthInterceptor. Executing manipulation of the argument…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR