high8.8
CVE-2024-9980
The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL c…
Impact
The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Formosasoft | Ee-Class | through 2024-03-26 |