← Vulnerability feed

Vulnerability record · CVE-2024-24004 · published 7 February 2024

CVE-2024-24004: Jishenghua jsherp sql injection vulnerability

JJishenghua · Jsherp

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection.

9.8 CVSS 3.1 Critical EPSS 0.68% · top 49.7% CWE-89 · SQL injection
9.8CVSS 3.1 base score
0.68%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24004.txt Third Party Advisory
https://github.com/jishenghua/jshERP/issues/99 ExploitIssue TrackingVendor Advisory
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24004.txt Third Party Advisory
https://github.com/jishenghua/jshERP/issues/99 ExploitIssue TrackingVendor Advisory

Track CVE-2024-24004 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-51744Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.EPSS 0.48%9.8CVE-2025-51745Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.EPSS 0.48%9.8CVE-2025-51746Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks.EPSS 0.48%9.8CVE-2025-51743Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization att…EPSS 0.48%9.8CVE-2025-51742Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter direc…EPSS 0.48%9.8CVE-2024-24003Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount…EPSS 0.80%9.8CVE-2024-24001Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDeta…EPSS 0.68%9.8CVE-2024-24002Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() func…EPSS 0.77%

Source: NIST National Vulnerability Database (record CVE-2024-24004), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.