CVE-2024-11251: erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection
A vulnerability was found in erzhongxmu Jeewms up to 20241108. It has been rated as critical. This issue affects some unknown processing of the file cgReportController.do of the component AuthInterceptor. The manipulation of the argument begindate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11251?
CVE-2024-11251 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2024-11251?
To fix CVE-2024-11251, update erzhongxmu Jeewms to a version later than 20241108.
What component is affected by CVE-2024-11251?
CVE-2024-11251 affects the cgReportController.do file within the AuthInterceptor component.
What type of vulnerability is CVE-2024-11251?
CVE-2024-11251 is a SQL injection vulnerability that can be exploited through manipulation of the begin_date argument.
Which versions of the software are affected by CVE-2024-11251?
CVE-2024-11251 affects all versions of erzhongxmu Jeewms up to and including 20241108.