Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
References
| Link | Resource |
|---|---|
| http://www.huayi-tec.com/ | Product |
| https://gitee.com/erzhongxmu/JEEWMS/issues/IB2XZG | Exploit Issue Tracking |
| https://gitee.com/fushuling/cve/blob/master/CVE-2024-53499.md | Exploit Third Party Advisory |
| https://gitee.com/erzhongxmu/JEEWMS/issues/IB2XZG | Exploit Issue Tracking |
| https://gitee.com/fushuling/cve/blob/master/CVE-2024-53499.md | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2025-08-22 18:15
Updated : 2025-09-09 19:12
NVD link : CVE-2024-53499
Mitre link : CVE-2024-53499
CVE.ORG link : CVE-2024-53499
JSON object : View
Products Affected
jeewms
- jeewms
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
