CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

Sql injection

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

PT-2023-24943

Name of the Vulnerable Software and Affected Versions Jeesite versions before commit 10742d3 Description The issue is a SQL injection vulnerability. It occurs via the component $businessTable at the /act/ActDao.xml endpoint. Recommendations For versions before commit 10742d3, update to a version...

CVE-2023-34601: Improper Neutralization of Special Elements used in an SQL Command

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

Jeesite SQL Injection Vulnerability

Zhuo source software Jeesite is China's Zhuo source software company of a set of open source Java EE enterprise-class rapid development platform . The platform includes system permissions components, data permissions components, data dictionary components, core tools components, view manipulation...

CVE-2023-34601

Summary of CVE-2023-34601 (JeeSite) : Jeesite before commit 10742d3 contains a SQL injection vulnerability via the component ${businessTable} in act/ActDao.xml. The root cause is unsanitized input that leads to SQL injection when building queries that use the ${businessTable} placeholder. The vul...

CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...