384 matches found
SQL Injection
com.mxpio:jeecg-boot-module-system is vulnerable to SQL injection attacks. An attacker is able to execute arbitrary SQL commands via id and realname parameters in queryUserByDepId function...
SQL Injection in Jeecg-boot
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
GHSA-VH2R-X97C-2VPR SQL Injection in Jeecg-boot
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
GHSA-F9PG-G9XW-R5G2 SQL Injection in Jeecg-boot
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
SQL Injection in Jeecg-boot
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
Sql injection
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
Sql injection
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22880
Jeecg-boot v3.0 is affected by an SQL injection in the code path /jeecg-boot/sys/user/queryUserByDepId, exploitable via the code parameter (also cited via queryUserByDepId with id/realname in some reports). The vulnerability stems from improper handling of user-supplied input in that function, en...
CVE-2022-22881
Jeecg-boot v3.0 is reported to contain a SQL injection vulnerability in the code parameter of /sys/user/queryUserComponentData. The CVE-2022-22881 entry documents a high-severity issue (CVSS v3.1 base score 9.8; Network Vector, Privileges None, User Interaction NONE) with potential impact on conf...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
Jeecg-boot 安全漏洞
Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot version v3.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via /jeecg-boot/sys/user/queryUserByDepId...
Jeecg-Boot SQL注入漏洞
Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...
SQL Injection
jeecg-boot-base-api is vulnerable to SQL injection. An attacker is able to modify or delete, causing persistent changes to the queries that the application makes to its database, mainly SQL, to compromise the underlying server or other back-enfd infrastructure...