Security Advisory

CVE-2024-24323

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-27 00:00:00
Last updated 2024-08-28 15:48:52
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component.