CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql POC للمسح الجماعي لثغرات حقن SQL غير المصرح بها. Jeecg-Boot هي منصة تطوير سريعة مبنية على Spring Boot وJeecg-Boot-Plus. تم اكتشاف العديد من ثغرات حقن SQL في أحدث إصدار jeecg-boot 3.5.0. الاستخدام root@kitploit: usage: CVE-2023-1454.py ...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql POC de scan de masse pour injection SQL non autorisée Jeecg-Boot est une plateforme de développement rapide basée sur Spring Boot et Jeecg-Boot-Plus. La dernière version jeecg-boot 3.5.0 a révélé plusieurs vulnérabilités d'injection SQL. Description Lien de l'outi...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql PoC للمسح الجماعي لثغرة حقن SQL غير المصرح بها Jeecg-Boot هي منصة تطوير سريع مبنية على Spring Boot وJeecg-Boot-Plus، وقد تم اكتشاف ثغرات متعددة لحقن SQL في أحدث إصدار jeecg-boot 3.5.0. استخدام الأداة python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 اختبار...

CVE-2023-1454

CVE-2023-1454 ثغرة حقن SQL غير مصرح بها في jeecg-boot CVE-2023-1454...

CVE-2024-48307POC

Уязвимость SQL-инъекции в интерфейсе getDictItemsByTable в jeecg-boot Параметры: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL Введите URL для проверки -f FILE, --file FILE Введите путь к файлу с одним URL на строку -c CONTENT, --content CONTENT Введите любо...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 ثغرة حقن SQL غير مصرح بها في jeecg-boot تُعد JeecgBoot منصة تطوير منخفضة الكود تعتمد على مولّد الأكواد. أحدث ثغرة حقن SQL غير مصرح بها في jeecg-boot v3.5.0 - وهي منصة Java منخفضة الكود لتطبيقات الويب الخاصة بالمؤسسات - تتيح للمهاجم، بالإضافة إلى استغلال ثغرة حقن SQ...

CVE-2023-1454

CVE-2023-1454 نص برمجي للكشف عن الثغرة CVE-2023-1454 هذا المستند لأغراض مرجعية فقط، يُرجى عدم استخدام المواد التقنية والأدوات الواردة فيه لاختراق أي نظام حاسوبي دون إذن. أي عواقب أو خسائر مباشرة أو غير مباشرة ناتجة عن استخدام المعلومات المقدمة هنا تقع على عاتق المستخدم وحده. مقدمة Jeecg-Boot هي...

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

CVE-2024-40489 concerns Jeecg Boot releases 3.0.0–3.5.3, where lax character filtering enables an injection vulnerability that could let an attacker execute arbitrary code via specially crafted HTTP requests. Affected software: Jeecg Boot (Java low-code platform) versions 3.0.0–3.5.3. Root cause:...