PT-2023-24943

Name of the Vulnerable Software and Affected Versions Jeesite versions before commit 10742d3 Description The issue is a SQL injection vulnerability. It occurs via the component $businessTable at the /act/ActDao.xml endpoint. Recommendations For versions before commit 10742d3, update to a version...

CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

CVE-2023-34601

Summary of CVE-2023-34601 (JeeSite) : Jeesite before commit 10742d3 contains a SQL injection vulnerability via the component ${businessTable} in act/ActDao.xml. The root cause is unsanitized input that leads to SQL injection when building queries that use the ${businessTable} placeholder. The vul...