384 matches found
CVE-2023-41578
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection...
CVE-2023-42268
Summary (concrete): Jeecg Boot up to v3.5.3 contains a SQL injection vulnerability in the component /jeecg-boot/jmreport/show. The root cause is unsanitized input leading to arbitrary SQL execution, potentially exposing sensitive data. Affected version range is up to 3.5.3; remediation is to upgr...
CVE-2023-42268
Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...
CVE-2023-41578
Jeecg boot up to v3.5.3 contains an arbitrary file read vulnerability exploitable via the /testConnection interface. The CVE entry documents impact to confidentiality (high) with no integrity/availability impact, and root cause is an insecure/unrestricted file read path exposed through the testCo...
jeecg SQL注入漏洞
Jeecg-Boot is a low-code platform based on a code generator. A SQL injection vulnerability exists in Jeecg-Boot v3.5.3 and earlier versions, which stems from a lack of validation of externally entered SQL statements in the component /jeecg-boot/jmreport/show. An attacker can exploit this...
CVE-2023-42268
Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show...
PT-2023-28303 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: Jeecg boot versions up to 3.5.3 Description: A SQL injection vulnerability was discovered in Jeecg boot via the component "/jeecg-boot/jmreport/show". This issue allows for SQL injection attacks, potentially leading to unauthorized access to...
CVE-2023-41578
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection...
Jeecg-boot SQL Injection vulnerability
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...
GHSA-9V66-9239-CQV2 Jeecg-boot SQL Injection vulnerability
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...
CVE-2023-38905
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...
Sql injection
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...
CVE-2023-38905
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...
CVE-2023-38905
CVE-2023-38905 affects Jeecg-boot v3.5.0 and earlier. The issue is an SQL injection vulnerability that a local attacker can exploit to cause a denial of service, by injecting through functions such as Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE. The availa...
PT-2023-26678 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: Jeecg-boot versions 3.5.0 and earlier Description: The issue allows a local attacker to cause a denial of service via the functions Benchmark, PG Sleep, DBMS Lock.Sleep, Waitfor, DECODE, and DBMS PIPE.RECEIVE MESSAGE. This is a result of a SQ...
CVE-2023-38905
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...
Jeecg-Boot SQL注入漏洞
Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. A security vulnerability exists in Jeecg-boot v.3.5.0 and earlier versions, which stems from the presence of a SQL injection vulnerability that could allow a local attacker to cause a denial of service via...
CVE-2023-38905
SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...