CVE-2024-48307POC

Уязвимость SQL-инъекции в интерфейсе getDictItemsByTable в jeecg-boot Параметры: options: -h, --help show this help message and exit -u URL, --url URL Введите URL для проверки -f FILE, --file FILE Введите путь к файлу с одним URL на строку -c CONTENT, --content CONTENT Введите любое значение для...

CVE-2023-1454

CVE-2023-1454 Jeecg-boot SQL-инъекция без авторизации CVE-2023-1454 Уязвимость| Jeecg-boot SQL-инъекция без авторизации CVE-2023-1454 ---|--- Китайское название| jeecg-boot 未授权SQL注入漏洞（CVE-2023-1454 Оценка CVSS| 9.8 Запрос FOFA нажмите для просмотра результатов| title=="JeecgBoot 企业级低代码平台"...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql неавторизованное массовое сканирование SQL-инъекций poc Jeecg-Boot — это быстрая платформа разработки на основе Spring Boot и Jeecg-Boot-Plus. В последней версии jeecg-boot 3.5.0 были обнаружены множественные уязвимости SQL-инъекций. Описание Оригинальный инструме...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql Injection SQL non authentifiée - POC de scan massif. Jeecg-Boot est une plateforme de développement rapide basée sur Spring Boot et Jeecg-Boot-Plus. La dernière version jeecg-boot 3.5.0 a révélé plusieurs vulnérabilités d'injection SQL...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql — PoC массового сканирования неавторизованных SQL-инъекций Jeecg-Boot — это платформа быстрой разработки на основе Spring Boot и Jeecg-Boot-Plus. В последней версии jeecg-boot 3.5.0 было обнаружено несколько SQL-инъекций. Использование инструмента python3...

CVE-2023-1454

CVE-2023-1454 Script de détection de la vulnérabilité CVE-2023-1454 Ce document est fourni à titre informatif uniquement. N'utilisez pas les informations techniques et les outils de cet article pour pénétrer dans un système informatique sans autorisation. Toute conséquence directe ou indirecte et...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot несанкционированная уязвимость SQL-инъекции JeecgBoot — это платформа низкокодовой разработки на основе генератора кода. Java-платформа низкого кода для корпоративных веб-приложений jeecg-boot v3.5.0 последняя несанкционированная SQL-инъекция. Помимо...

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...