CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

Jeecg-Boot SQL注入漏洞

Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. A security vulnerability exists in Jeecg-boot v.3.5.0 and earlier versions, which stems from the presence of a SQL injection vulnerability that could allow a local attacker to cause a denial of service via...

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

CVE-2023-38905: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

GHSA-WP6C-29R3-JQW9 SQL injection in jeecg-boot

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

SQL injection in jeecg-boot

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

Sql injection

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

Jeecg-Boot SQL注入漏洞

Jeecg-Boot is a low-code platform based on a code generator from the JeecgBoot community. A security vulnerability exists in Jeecg-Boot version 3.5.1, which stems from a SQL injection vulnerability in the parameter title...

CVE-2023-38992: Improper Neutralization of Special Elements used in an SQL Command

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

PT-2023-26721 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot version 3.5.1 Description: The issue is a SQL injection vulnerability. It occurs via the title parameter at the "/sys/dict/loadTreeData" API endpoint. Recommendations: For jeecg-boot version 3.5.1, consider restricting access to th...

CVE-2023-38992

Jeecg-Boot v3.5.1 is affected by a SQL injection vulnerability exposed via the title parameter in the /sys/dict/loadTreeData API. Root cause: insufficient input handling leading to SQL injection (CWE-89). Impact: high-severity access to sensitive data; CVSS v3.1 base score 9.8. Mitigation: apply ...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

Arbitrary File Upload

jeecg-boot-base-core is vulnerable to Arbitrary File Upload. The vulnerability exists because the library does not properly validate uploading files, allowing an attacker to upload maliciously crafted files through the /jeecg-boot/jmreport/upload endpoint...