J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the list function of the sqlfilter...

CVE-2024-33155

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the getDeptList function...

CVE-2024-33153

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the commentList function...

J2eeFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from BpmTaskMapper.xml...

CVE-2024-33164

J2EEFAST v2.7.0 is vulnerable to a SQL injection vulnerability within the authUserList() function. The root cause is a lack of proper validation for external input provided via the sql_filter parameter. An attacker can exploit this flaw to execute unauthorized SQL commands and potentially steal s...

PT-2024-25132 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: The issue is related to a SQL injection vulnerability. It occurs via the sql filter parameter in the list function. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the list...

CVE-2024-33144

J2EEFAST v2.7.0 is affected by a SQL injection vulnerability caused by a lack of validation on external input for the sql_filter parameter. This occurs within the findApplyedTasksPage function in the BpmTaskMapper.xml file. An attacker can exploit this flaw to execute unauthorized SQL commands, p...

CVE-2024-33149: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the myProcessList function...

J2eeFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2eeFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the export function of the sqlfilte...

PT-2024-25139 · J2Eefast · J2Eefast

Name of the Vulnerable Software and Affected Versions: J2EEFAST version 2.7.0 Description: A SQL injection issue was found in J2EEFAST via the sql filter parameter in the authUserList function. Recommendations: For J2EEFAST version 2.7.0, consider restricting access to the authUserList function...

CVE-2024-33139

J2EEFAST v2.7.0 is vulnerable to a SQL injection flaw within the findpage function. The root cause is a lack of validation for external input provided via the sql_filter parameter. An attacker could exploit this vulnerability to execute unauthorized SQL commands, potentially leading to the theft ...

CVE-2024-33147

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the authRoleList function...

CVE-2024-33146

The J2EEFAST rapid development platform version 2.7.0 is susceptible to a SQL injection vulnerability (CWE-89). The root cause is a lack of validation for external input within the export function 's sql_filter parameter. An attacker could exploit this to execute illegal SQL commands and steal se...

CVE-2024-33155: Improper Neutralization of Special Elements used in an SQL Command

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the getDeptList function...

CVE-2024-33139

J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...

CVE-2023-2476

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...

Cross site scripting

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument ????/???? leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2023-2476

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2023-2476

CVE-2023-2476 affects Dromara J2eeFAST up to 2.6.0, specifically the Announcement Handler. The vulnerability arises from manipulating the argument 系统工具/公告管理, enabling remote cross-site scripting. Exploit appears to be publicly disclosed. Patch named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d should...

CVE-2023-2476 Dromara J2eeFAST Announcement cross site scripting

A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...