PT-2021-11444

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: An arbitrary file upload vulnerability in the "/jeecg-boot/sys/common/upload" API endpoint of jeecg-boot CMS allows attackers to execute arbitrary code. Recommendations: For jeecg-boot CMS version 2.3,...

CVE-2020-28088: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-23083

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload"...