CVE-2024-0301 MEDIUM

CVE-2024-0301: fhs-opensource iparking PayTempOrderAction.java getData sql injection

Vendor Fhs-Opensource

Product iparking

Weakness CWE-89 · SQLi

Published January 8, 2024

Last update June 17, 2025

View on NVD All CVEs

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

Description

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249868.

Key dates

Disclosure timeline

January 8, 2024 CVE published

June 17, 2025 Record updated