474 matches found
CVE-2022-45206
CVE-2022-45206 affects Jeecg-boot v3.4.3 with a SQL injection vulnerability in the /sys/duplicate/check component. The CVSS v3.1 score is 9.8 (CRITICAL) with Network attack vector, no privileges required, and no user interaction, impacting confidentiality, integrity, and availability. This is doc...
PT-2022-27432
Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.4.3 Description A SQL injection issue was found in the /sys/duplicate/check component. This could potentially allow an attacker to inject malicious SQL code. Recommendations For Jeecg-boot version 3.4.3, as a temporary...
CVE-2022-45207
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45205
CVE-2022-45205 affects Jeecg-boot v3.4.3 with a SQL injection vulnerability in the /sys/dict/queryTableData component. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) yields a base score of 5.3 (Medium). Documented impact indicates confidentiality impact is Low; no information on exploi...
CVE-2022-45205
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...
CVE-2022-45207
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45208: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin...
CVE-2022-45207: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45210
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
CVE-2022-45210: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
CVE-2022-45210
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
PT-2022-27436 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: Jeecg-boot version 3.4.3 Description: A SQL injection issue was found in the /sys/user/deleteRecycleBin component. This could potentially allow an attacker to inject malicious SQL code. Recommendations: For Jeecg-boot version 3.4.3, consider...
CVE-2022-45210
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin...
CVE-2022-45205: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData...
CVE-2022-45206
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check...
PT-2022-27433 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: Jeecg-boot version 3.4.3 Description: A SQL injection issue was discovered in Jeecg-boot via the component updateNullByEmptyString. This allows for potential exploitation. Recommendations: For Jeecg-boot version 3.4.3, consider restricting...
CVE-2022-45207
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString...
CVE-2022-45208
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin...
JeecgBoot: SQL Injection Vulnerability
Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. JeecgBoot A security vulnerability exists in Jeecg-Boot version v3.4.3, which stems from the discovery of a contained SQL injection vulnerability via component /sys/dict/queryTableData...
JeecgBoot: SQL Injection Vulnerability
Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. JeecgBoot A security vulnerability exists in Jeecg-Boot version v3.4.3, which stems from the discovery of a contained SQL injection vulnerability via the component updateNullByEmptyString...