2024-03-29 00:58:20 +00:00
|
|
|
{
|
|
|
|
|
"id": "CVE-2024-28714",
|
|
|
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
|
|
|
"published": "2024-03-28T23:15:46.410",
|
2024-03-29 13:03:26 +00:00
|
|
|
"lastModified": "2024-03-29T12:45:02.937",
|
|
|
|
|
"vulnStatus": "Awaiting Analysis",
|
2024-03-29 00:58:20 +00:00
|
|
|
"descriptions": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
|
|
|
|
"value": "SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter."
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"metrics": {},
|
|
|
|
|
"references": [
|
|
|
|
|
{
|
|
|
|
|
"url": "http://crmebjava.com",
|
|
|
|
|
"source": "cve@mitre.org"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://gitee.com/ZhongBangKeJi/crmeb_java",
|
|
|
|
|
"source": "cve@mitre.org"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://github.com/JiangXiaoBaiJia/cve2/blob/main/1.md",
|
|
|
|
|
"source": "cve@mitre.org"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "https://github.com/JiangXiaoBaiJia/cve2/blob/main/a.png",
|
|
|
|
|
"source": "cve@mitre.org"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
