CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2026/05/07 12:00 a.m.•1 views

CVE-2026-8114: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.3AI score0.00316EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/07/28 12:00 a.m.•2 views

CVE-2023-38992: Improper Neutralization of Special Elements used in an SQL Command

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

9.8CVSS8.1AI score0.73398EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2021/08/06 12:00 a.m.•5 views

CVE-2020-28087: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

7.5CVSS5.8AI score0.01554EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by