CVE-2022-2647 jeecg-boot unrestricted upload

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2022-2647 jeecg-boot unrestricted upload

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

jeecg 代码问题漏洞

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot, which stems from unknown code affecting file/api/, which operates on parameter files resulting in unrestricted uploads. Attacks can be initiated remotely...

PT-2022-17882 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot affected versions not specified Description: A critical issue has been found in jeecg-boot, affecting unknown code of the file "/api/". The manipulation of the file argument leads to unrestricted upload. The attack can be initiated...

GHSA-JF7X-57G8-9HM5 Jeecg-Boot CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

Jeecg-Boot CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

jeecg-boot suffers from a SQL injection vulnerability (CNVD-2022-43846)

JeecgBoot is a low-code BPM-based platform. jeecg-boot suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information about a database...

Jeecg-Boot Cross-Site Scripting Vulnerability

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-Boot 3.0 has a security vulnerability that stems from a cross-site script in /jeecg-boot/jmreport/view that causes a mouse hover event. No details of the vulnerability are currently available...

Cross-site Scripting (XSS)

org.jeecgframework.boot:jeecg-boot-base-core is vulnerable to cross-site scripting. The vulnerability exists in jeecg-boot/jmreport/view with a mouseover event, allowing an attacker to inject and execute malicious javascript...

Cross-site Scripting in jeecg-boot

jeecg-boot is a code generator. A Cross Site Scripting XSS vulnerabilitiy exists in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

GHSA-Q448-6C3M-CXMJ Cross-site Scripting in jeecg-boot

jeecg-boot is a code generator. A Cross Site Scripting XSS vulnerabilitiy exists in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

Cross site scripting

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

CVE-2021-44585

CVE-2021-44585 is a reported cross‑site scripting (XSS) vulnerability affecting Jeecg-Boot 3.0 in the path “/jeecg-boot/jmreport/view.” The connected documents consistently describe an XSS in a mouseover event, allowing injection/execution of malicious JavaScript. Exploitation status is not provi...

Jeecg-Boot 跨站脚本漏洞

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-Boot 3.0 has a security vulnerability that stems from a cross-site script in /jeecg-boot/jmreport/view that causes a mouse hover event. No details of the vulnerability are currently available...

Jeecg-boot SQL Injection Vulnerability (CNVD-2022-22566)

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot version v3.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via /jeecg-boot/sys/user/queryUserByDepId...

Jeecg-boot SQL Injection Vulnerability

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...