CVE-2024-28714: SQL Injection
Published Mar 28, 2024
·Updated
SQL Injection vulnerability in CRMEBJava e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.
Affected Software
2 affected components
crmeb crmeb_java
crmeb CRMEB Java<1.3.4
Event History
Mar 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-28714?
CVE-2024-28714 is classified as a high-severity SQL Injection vulnerability.
2
How do I fix CVE-2024-28714?
To resolve CVE-2024-28714, update your CRMEB_Java e-commerce system to a version later than 1.3.4.
3
What are the consequences of CVE-2024-28714?
Exploitation of CVE-2024-28714 allows attackers to execute arbitrary code, leading to potential data breaches.
4
Which versions of CRMEB_Java are affected by CVE-2024-28714?
CVE-2024-28714 affects CRMEB_Java versions up to and including 1.3.4.
5
Can CVE-2024-28714 be exploited remotely?
Yes, CVE-2024-28714 can be exploited remotely through manipulation of the groupid parameter.