CVE-2024-24002 | jshERP 3.3 getListWithStock sql injection (Issue 99)

A vulnerability was found in jshERP 3.3. It has been declared as critical. Affected by this vulnerability is the function getListWithStock. The manipulation leads to sql injection.

This vulnerability is known as CVE-2024-24002. Access to the local network is required for this attack. There is no exploit available.