CVE-2024-24001

Published: 2024-02-07T00:15Z

Last Modified: 2024-11-21T08:58Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDetail() function of jshERP which allows an attacker to construct malicious payload to bypass jshERP's protection mechanism. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt