CVE Catalog
CVE-2024-28714
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk0.84%
54th percentile - higher than 54% of all known CVEs
Summary
SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.
Risk Assessment
An attacker can gain unauthorized access to the database, steal sensitive customer data, or take control of the system.
Recommendation
Immediately update CRMEB_Java to the latest version and implement parameterized SQL queries for the groupid parameter.
Other vulnerabilities in CRMEB_Java
Original NVD description (English source)
SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the groupid parameter.