Skip to content

CVE-2024-1012 Wanhu ezOFFICE wf_printnum.jsp sql injection

CriticalCVSS 9.8 EPSS 0.92%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/work_flow/operate/wf_printnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252281 was assigned to this vulnerability.

Affected products

ProductAffected versionsFixed in
Wanhu ezOFFICE = 11.1.0 No fix listed
whir ezoffice = 11.1.0 No fix listed

References

  • vuldb.com permissions-required technical-description third-party-advisory vdb-entry
  • vuldb.com permissions-required signature third-party-advisory vdb-entry
  • github.com exploit third-party-advisory