A vulnerability was found in jshERP 3.3. It has been rated as critical. Affected by this issue is the function findInOutDetail. The manipulation leads to sql injection.

This vulnerability is handled as CVE-2024-24004. Access to the local network is required for this attack to succeed. There is no exploit available.