CVE-2024-28714

Published March 28th, 2024

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.

JiangXiaoBaiJia/cve2

GitHub