77 matches found
AJ-Report 安全漏洞
AJ-Report is a fully open source, drag-and-drop editing visual design tool from anji-plus open source. A security vulnerability exists in anji-plus AJ-Report 1.4.1 and earlier versions, which stems from a deserialization vulnerability in the function getValueFromJs of the component Javascript...
AJ-Report 命令注入漏洞
AJ-Report is a fully open source, drag-and-drop editing visual design tool from anji-plus open source. A command injection vulnerability exists in anji-plus AJ-Report 1.4.1 and earlier versions, which stems from a command injection vulnerability in function IGroovyHandler...
AJ-Report SQL注入漏洞
AJ-Report is anji-plus open source a completely open source , drag and drop editing visual design tools. AJ-Report 1.4.1 and earlier versions of SQL injection vulnerability , there is no detailed vulnerability details provided...
CVE-2024-5350
A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-5350
A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-5350 anji-plus AJ-Report pageList sql injection
A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-5350
CVE-2024-5350 affects the anji-plus AJ-Report product family up to version 1.4.1, specifically the pageList function and its p parameter. The root cause is a SQL injection vulnerability that can be exploited remotely, and multiple sources indicate that the exploit has been disclosed publicly. Con...
CVE-2024-5350 anji-plus AJ-Report pageList sql injection
A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
PT-2024-35762 · Unknown · Anji-Plus Aj-Report
Name of the Vulnerable Software and Affected Versions: anji-plus AJ-Report versions up to 1.4.1 Description: A critical issue has been found, affecting the pageList function of the file /pageList. The manipulation of the argument p leads to SQL injection, allowing for remote attacks...
AJ-Report Server-Side Request Forgery Vulnerability
AJ-Report is a completely open source BI platform. AJ-Report version 0.9.8.6 suffers from a server-side request forgery vulnerability that can be exploited by an attacker to perform a server-side request forgery attack...
AJ-Report 代码问题漏洞
AJ-Report is a completely open source BI platform. AJ-Report version 0.9.8.6 suffers from a server-side request forgery vulnerability that can be exploited by an attacker to perform a server-side request forgery attack...
CVE-2022-42983
anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...
CVE-2022-42983
anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...
CVE-2022-42983
anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens...
CVE-2022-42983
CVE-2022-42983 affects anji-plus AJ-Report 0.9.8.6. The issue allows remote attackers to bypass login authentication by spoofing JWT Tokens. Impact is described as high (CVE entry indicates Network attack vector, low complexity, required privileges, no user interaction; confidentiality, integrity...
anji-plus AJ-Report 安全漏洞
AJ-Report is a fully open source, drag-and-drop editing visual design tool from anji-plus open source. A security vulnerability exists in anji-plus AJ-Report version 0.9.8.6, which stems from a vulnerability that allows remote attackers to bypass login authentication by spoofing JWT Tokens...