526 matches found
JeecgBoot Jeecg-Boot SQL注入漏洞
Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. JeecgBoot A security vulnerability exists in Jeecg-Boot version v3.4.3, which stems from the discovery of a contained SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45207
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45208: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin...
PT-2022-27436 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: Jeecg-boot version 3.4.3 Description: A SQL injection issue was found in the /sys/user/deleteRecycleBin component. This could potentially allow an attacker to inject malicious SQL code. Recommendations: For Jeecg-boot version 3.4.3, consider...
CVE-2022-45210
CVE-2022-45210 affects Jeecg-boot v3.4.3, with a SQL injection vulnerability in the /sys/user/deleteRecycleBin component. The CVSS v3.1 base score is 4.3 (Medium); vector is AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. Exploitation status and concrete remediation are not detailed in the provided document...
CVE-2022-45210: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
CVE-2022-45205: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...
CVE-2022-45206: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check...
PT-2022-27432
Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.4.3 Description A SQL injection issue was found in the /sys/duplicate/check component. This could potentially allow an attacker to inject malicious SQL code. Recommendations For Jeecg-boot version 3.4.3, as a temporary...
CVE-2022-45206
CVE-2022-45206 affects Jeecg-boot v3.4.3 with a SQL injection vulnerability in the /sys/duplicate/check component. The CVSS v3.1 score is 9.8 (CRITICAL) with Network attack vector, no privileges required, and no user interaction, impacting confidentiality, integrity, and availability. This is doc...
CVE-2022-45210
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
CVE-2022-45206
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check...
CVE-2022-45208
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin...
CVE-2022-45210
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
CVE-2022-45208
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin...
CVE-2022-45205
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...
CVE-2022-45207
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45208
Jeecg-boot v3.4.3 is affected by a SQL injection vulnerability in the /sys/user/putRecycleBin component (CVE-2022-45208). The issue is identified in multiple feeds as a SQLi公开点, with the root cause described as vulnerability enabling crafted input to influence SQL queries via that endpoint. NVD a...