CVE-2024-1012

A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/work_flow/operate/wf_printnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252281 was assigned to this vulnerability.

• CWE-89

• https://github.com/4nNns/cveAdd/blob/b73e94ff089ae2201d9836b4d61b8175ff21618a/sqli/%E4%B8%87%E6%88%B7EZOFFICE%20%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.252281Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252281Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/4nNns/cveAdd/blob/b73e94ff089ae2201d9836b4d61b8175ff21618a/sqli/%E4%B8%87%E6%88%B7EZOFFICE%20%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.252281Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252281Permissions Required, Third Party Advisory, VDB Entry

Published

Jan 31, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10114The WooCommerce - Social Login plugin for WordPress is vulne…8.1
• CVE-2024-10115Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-10116The Twitter Follow Button plugin for WordPress is vulnerable…5.4
• CVE-2024-10117The WP Crowdfunding plugin for WordPress is vulnerable to St…5.4
• CVE-2024-10118SECOM WRTR-304GN-304TW-UPSC does not properly filter user in…9.8
• CVE-2024-10119The wireless router WRTM326 from SECOM does not properly val…9.8
• CVE-2024-10120A vulnerability has been found in wfh45678 Radar up to 1.0.8…9.8
• CVE-2024-10121A vulnerability was found in wfh45678 Radar up to 1.0.8 and …9.8
• CVE-2024-10122A vulnerability was found in Topdata Inner Rep Plus WebServe…4.9
• CVE-2024-10123A vulnerability was found in Tenda AC8 16.03.34.06. It has b…8.8
• CVE-2024-10124The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommer…9.8
• CVE-2024-10125The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo…7.5