PT-2025-4013 · Joeybling · Bootplus

Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A problematic issue was found in the qrCode function of the QrCodeController.java file. The manipulation of the w/h argument leads to resource consumption. This...

CVE-2025-0703: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads ...

PT-2025-4008

Name of the Vulnerable Software and Affected Versions JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description A critical vulnerability has been found in JoeyBling bootplus. The issue affects an unknown functionality of the file /admin/sys/role/list. The manipulation of the...

CVE-2025-0699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/sys/role/list. The manipulation of the argument sort leads to sql injection. The attack c...

bootplus 注入漏洞

bootplus is a permission management framework by JoeyBling Personal Developer. An injection vulnerability exists in bootplus, which stems from the parameter sort in the file /admin/sys/role/list that causes SQL injection...

CVE-2025-0704: Uncontrolled Resource Consumption

A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource...

bootplus 路径遍历漏洞

bootplus is a privilege management framework by JoeyBling Personal Developer. A path traversal vulnerability exists in bootplus, which stems from the parameter name in the file src/main/java/io/github/controller/SysFileController.java that causes path traversal...

PT-2025-4012 · Joeybling · Bootplus

Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A problematic issue has been found in JoeyBling bootplus, affecting the processing of the file src/main/java/io/github/controller/SysFileController.java. The...

PT-2025-4015

Name of the Vulnerable Software and Affected Versions JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description A vulnerability was found in JoeyBling bootplus, affecting some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site...

CVE-2025-0702: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This vulnerability affects unknown code of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument portraitFile leads to unrestricted...

CVE-2025-0706: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2025-0701: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This affects an unknown part of the file /admin/sys/user/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely...

bootplus 注入漏洞

bootplus is a permission management framework by JoeyBling Personal Developer. An injection vulnerability exists in bootplus, which stems from the parameter sort in the file /admin/sys/user/list that causes SQL injection...

CVE-2025-0700: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/sys/log/list. The manipulation of the argument logId leads to sql injection. The attack may be...

CVE-2025-0698: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the...

bootplus 代码问题漏洞

bootplus is a permission management framework by JoeyBling Personal Developer. A code issue vulnerability exists in bootplus, which stems from the parameter PortraitFile in the file src/main/java/io/github/controller/SysFileController.java that can lead to unrestricted uploads...

bootplus 安全漏洞

bootplus is a permission management framework by JoeyBling Personal Developer. A security vulnerability exists in bootplus, which stems from the parameter logId in the file /admin/sys/log/list that can lead to SQL injection...