CVE-2024-24001 | jshERP 3.3 findallocationDetail sql injection (Issue 99)

A vulnerability was found in jshERP 3.3. It has been classified as critical. Affected is the function findallocationDetail. The manipulation leads to sql injection.

This vulnerability is traded as CVE-2024-24001. The attack needs to be initiated within the local network. There is no exploit available.