cve/2024/CVE-2024-25469.md
2024-05-25 21:48:12 +02:00

664 B

CVE-2024-25469

Description

SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive information via the latitude and longitude parameters in the api/front/store/list component.

POC

Reference

No PoCs from references.

Github