PT-2021-11444

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: An arbitrary file upload vulnerability in the "/jeecg-boot/sys/common/upload" API endpoint of jeecg-boot CMS allows attackers to execute arbitrary code. Recommendations: For jeecg-boot CMS version 2.3,...

CVE-2020-28088: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...