CVE-2023-1454

CVE-2023-1454 Poc di scansione di massa per SQL injection non autorizzata in jmreport/qurestSql Jeecg-Boot è una piattaforma di sviluppo rapido basata su Spring Boot e Jeecg-Boot-Plus. Nell'ultima versione jeecg-boot 3.5.0 sono state scoperte diverse vulnerabilità di SQL injection. Nota Indirizzo...

CVE-2023-1454

CVE-2023-1454 jeecg-boot Vulnerabilità di SQL Injection non autorizzata CVE-2023-1454...

Jeecg P3 Biz Chat - Local File Inclusion

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters. id: CVE-2023-33510 info: name: Jeecg P3 Biz Chat - Local File Inclusion author: DhiyaneshDK severity: high description: | Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files...

Jeecg Boot <= 2.4.5 - Sensitive Information Disclosure

Jeecg Boot = 2.4.5 API interface has unauthorized access and leaks sensitive information such as email,phone and Enumerate usernames that exist in the system. id: CVE-2021-37305 info: name: Jeecg Boot = 2.4.5 - Sensitive Information Disclosure author: ritikchaddha severity: high description: |...

Jeecg-Boot v3.5.1 - SQL Injection

SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData in jeecg-boot v3.5.1. id: CVE-2023-38992 info: name: Jeecg-Boot v3.5.1 - SQL Injection author: ritikchaddha severity: critical description: | SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

Jeecg Boot <= 2.4.5 - Information Disclosure

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface. id: CVE-2021-37304 info: name: Jeecg Boot = 2.4.5 - Information Disclosure author: ritikchaddha severity: high...

Jeecg-boot 3.5.0 qurestSql - SQL Injection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. id: CVE-2023-1454 info: name: Jeecg-boot 3.5...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql poc per scansione batch di SQL injection non autorizzata. Jeecg-Boot è una piattaforma di sviluppo rapido basata su Spring Boot e Jeecg-Boot-Plus; nell'ultima versione jeecg-boot 3.5.0 sono state scoperte multiple vulnerabilità di SQL...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unautorisierter SQL-Injection Massen-Scan PoC Jeecg-Boot ist eine schnelle Entwicklungsplattform basierend auf Spring Boot und Jeecg-Boot-Plus. In der neuesten Version jeecg-boot 3.5.0 wurden mehrere SQL-Injection-Schwachstellen entdeckt. Werkzeugnutzung python3...

CVE-2024-48307POC

ثغرة حقن SQL في واجهة getDictItemsByTable في jeecg-boot الخيارات: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 -c CONTENT, --content CONTENT 输入任意值查看漏洞详情 أمثلة: root@kitploit: 单个检测： python .\CVE-2024-48307Poc.p...

CVE-2023-1454

CVE-2023-1454 Сценарий обнаружения уязвимости CVE-2023-1454 Данный материал предоставлен только для ознакомления. Несанкционированное использование технической информации и инструментов, описанных в статье, для вторжения в любые компьютерные системы запрещено. Автор не несет ответственности за...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot Vulnerabilità di SQL injection non autorizzata JeecgBoot è una piattaforma di sviluppo low-code basata su un generatore di codice. Utilizzata per applicazioni Web aziendali, la piattaforma Java low-code jeecg-bootv3.5.0 presenta la più recente SQL...

JeecgBoot 访问控制错误漏洞

JeecgBoot is a Java low-code platform developed by Jeecg Corporation, designed for enterprise web applications. JeecgBoot versions 3.9.2 and earlier contain an access control vulnerability. This vulnerability stems from the function queryPageList in the User List Endpoint component, which process...

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

CVE-2026-8195

A vulnerability was detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/CommonController.java of the component SVG File Handler. The manipulation results in cross site...

CVE-2026-8195 JeecgBoot SVG File CommonController.java cross site scripting

A vulnerability was detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/CommonController.java of the component SVG File Handler. The manipulation results in cross site...

JeecgBoot 授权问题漏洞

JeecgBoot is a Java low-code platform developed by Jeecg Corporation, designed for enterprise web applications. Version 3.9.1 of JeecgBoot contains an authorization vulnerability. This vulnerability stems from an unknown function in the mLogin Endpoint’s file...

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...