CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

Arbitrary file deletion

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2020-20948

CVE-2020-20948 affects jeecg v3.8, enabling arbitrary file download by modifying the localPath variable. The vulnerability stems from insufficient input validation/Access Control, allowing an attacker to access sensitive files. Exploitation status is not documented in the provided sources; no pat...

PT-2021-10559

Name of the Vulnerable Software and Affected Versions: jeecg version 3.8 Description: The issue allows attackers to access sensitive files by modifying the localPath variable, potentially leading to unauthorized access to sensitive information. Recommendations: For jeecg version 3.8, consider...

jeecg 访问控制错误漏洞

jeecg is a software application. An intelligent development platform based on a code generator. An Access Control Error vulnerability exists in Jeecg that stems from the product not doing valid validation of input data. An attacker can exploit the vulnerability to access sensitive files by...

CVE-2020-20948: Exposure of Resource to Wrong Sphere

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

Jeecg-boot CMS SQL Injection Vulnerability

Jeecg-Boot is a code generator-based intelligent development platform. jeecg-boot CMS version 2.3 of /jeecg boot/sys/dict/loadtreedata is vulnerable to SQL injection, which can be exploited by attackers to access sensitive database information...

Jeecg-boot CMS Arbitrary File Upload Vulnerability

Jeecg-Boot is an intelligent development platform based on code generator. Jeecg-boot CMS version 2.3 of /jeecg-boot/sys/common/upload is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary code...

CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

Sql injection

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-28088

CVE-2020-28088 affects jeecg-boot CMS 2.3, with an arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload that can lead to code execution. External entries (Red Hat, GHSA/OSV, CNVD/CNNVD, CVE listings) confirm the issue and the impact as arbitrary code execution. The core root cause...

CVE-2020-28087

Summary (CVE-2020-28087): Jeecg-boot CMS version 2.3 contains a SQL injection vulnerability in the path /jeecg-boot/sys/dict/loadtreedata. The issue allows an attacker to access sensitive database information. The root cause is not explicitly detailed in the provided documents, and no remediation...

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

PT-2021-11444

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: An arbitrary file upload vulnerability in the "/jeecg-boot/sys/common/upload" API endpoint of jeecg-boot CMS allows attackers to execute arbitrary code. Recommendations: For jeecg-boot CMS version 2.3,...