nvd-json-data-feeds/CVE-2024/CVE-2024-511xx/CVE-2024-51164.json

{
  "id": "CVE-2024-51164",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-11-15T16:15:37.057",
  "lastModified": "2024-11-18T17:11:56.587",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple parameters have SQL injection vulnerability in JEPaaS 7.2.8 via /je/login/btnLog/insertBtnLog, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB."
    },
    {
      "lang": "es",
      "value": "Varios par\u00e1metros tienen una vulnerabilidad de inyecci\u00f3n SQL en JEPaaS 7.2.8 a trav\u00e9s de /je/login/btnLog/insertBtnLog, lo que podr\u00eda permitir que un usuario remoto env\u00ede una consulta especialmente manipulada, permitiendo a un atacante recuperar toda la informaci\u00f3n almacenada en la base de datos."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://gitee.com/ketr/jepaas-release",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/abcc111/vulns/blob/main/JEPaaS/Multiple%20parameters%20have%20SQL%20injection%20issues%20in%20JEPAAS.md",
      "source": "cve@mitre.org"
    }
  ]
}