Vulnerability CVE-2024-28714


Published: 2024-03-28   Modified: 2024-03-29

Description:
SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.

 References:
http://crmebjava.com
https://gitee.com/ZhongBangKeJi/crmeb_java
https://github.com/JiangXiaoBaiJia/cve2/blob/main/a.png
https://github.com/JiangXiaoBaiJia/cve2/blob/main/1.md

Copyright 2024, cxsecurity.com

 

Back to Top