CVE-2024-48307POC

Уязвимость SQL-инъекции в интерфейсе getDictItemsByTable в jeecg-boot Параметры: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL Введите URL для проверки -f FILE, --file FILE Введите путь к файлу с одним URL на строку -c CONTENT, --content CONTENT Введите любо...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql POC de scan de masse pour injection SQL non autorisée Jeecg-Boot est une plateforme de développement rapide basée sur Spring Boot et Jeecg-Boot-Plus. La dernière version jeecg-boot 3.5.0 a révélé plusieurs vulnérabilités d'injection SQL. Description Lien de l'outi...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql — poc массового сканирования неавторизованных SQL-инъекций. Jeecg-Boot — это платформа быстрой разработки на основе Spring Boot и Jeecg-Boot-Plus. В последней версии jeecg-boot 3.5.0 было обнаружено несколько уязвимостей SQL-инъекций...

CVE-2023-1454

CVE-2023-1454 jeecg-boot 未認可SQLインジェクション脆弱性 CVE-2023-1454 脆弱性| jeecg-boot 未認可SQLインジェクション脆弱性 CVE-2023-1454 ---|--- 中国語名| jeecg-boot 未授权SQL注入漏洞（CVE-2023-1454 CVSSスコア| 9.8 FOFAクエリ 結果を直接表示するにはクリック| title=="JeecgBoot 企业级低代码平台" 影響を受けるアセット数| 3957 説明|...

CVE-2023-1454

CVE-2023-1454 POC de scan en masse d'injection SQL non autorisée pour jmreport/qurestSql Jeecg-Boot est une plateforme de développement rapide basée sur Spring Boot et Jeecg-Boot-Plus. De multiples vulnérabilités d'injection SQL ont été découvertes dans la dernière version jeecg-boot 3.5.0...

CVE-2023-1454

CVE-2023-1454 Script de détection de la vulnérabilité CVE-2023-1454 Ce document est fourni à titre informatif uniquement. N'utilisez pas les informations techniques et les outils de cet article pour pénétrer dans un système informatique sans autorisation. Toute conséquence directe ou indirecte et...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot несанкционированная уязвимость SQL-инъекции JeecgBoot — это платформа низкокодовой разработки на основе генератора кода. Java-платформа низкого кода для корпоративных веб-приложений jeecg-boot v3.5.0 последняя несанкционированная SQL-инъекция. Помимо...

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

CVE-2024-43028 is a reported command-injection vulnerability in the Jeecg Boot platform, affecting the /jmreport/show component from v3.0.0 to v3.5.3. The issue allows an attacker to execute arbitrary code via a crafted HTTP request, with network access (no authentication) required. The CVSS v3.1...