SQL - CVE CyberSecurity Database News (Page 39)

May 23, 2024 SQL Java

CVE-2024-35086 - Critical SQL Injection in J2EEFAST v2.7. via BpmTaskFromMapper.xml `findPage` Function

A critical SQL Injection vulnerability has been discovered in J2EEFAST version 2.7., tracked as CVE-2024-35086. The issue exists in the findPage function of BpmTaskFromMapper.

May 23, 2024 Exploit SQL PHP

CVE-2024-34932 - How a Simple SQL Injection Can Hack Your School Management System

On June 2024, CVE-2024-34932 was publicly disclosed, uncovering a critical SQL injection flaw in a popular educational product: Campcodes Complete Web-Based School Management System v1.

May 23, 2024 Exploit SQL PHP

CVE-2024-34934 - SQL Injection in Campcodes Complete Web-Based School Management System 1. ([emark_range_grade_update_form.php]) – Exploit Details & Analysis

Published: 2024 Affects: Campcodes Complete Web-Based School Management System 1. Vulnerability Type: SQL Injection File: /view/emarks_range_grade_update_form.php Vulnerable Parameter: conversation_

May 23, 2024 SQL PHP

CVE-2024-35084 - Unpacking the SQL Injection in J2EEFAST v2.7.’s findPage Function

In early June 2024, security researchers detected a critical SQL injection vulnerability in J2EEFAST version 2.7.. Registered as CVE-2024-35084, this flaw lets attackers execute

May 23, 2024 Exploit SQL Java

CVE-2024-35085 - SQL Injection in J2EEFAST v2.7. via ProcessDefinitionMapper.xml — What You Need to Know

In June 2024, a critical security vulnerability, CVE-2024-35085, was discovered in J2EEFAST v2.7.. This flaw allows attackers to perform SQL injection through the findPage