Vulnerability CVE-2024-24110


Published: 2024-03-21

Description:
SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

 References:
https://github.com/crmeb/crmeb_java/issues/13

Copyright 2026, cxsecurity.com

 

Back to Top