Jeecg-boot CMS SQL Injection Vulnerability

Jeecg-Boot is a code generator-based intelligent development platform. jeecg-boot CMS version 2.3 of /jeecg boot/sys/dict/loadtreedata is vulnerable to SQL injection, which can be exploited by attackers to access sensitive database information...

Jeecg-boot CMS Arbitrary File Upload Vulnerability

Jeecg-Boot is an intelligent development platform based on code generator. Jeecg-boot CMS version 2.3 of /jeecg-boot/sys/common/upload is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary code...

CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

Sql injection

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

CVE-2020-28088

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

CVE-2020-28088

CVE-2020-28088 affects jeecg-boot CMS 2.3, with an arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload that can lead to code execution. External entries (Red Hat, GHSA/OSV, CNVD/CNNVD, CVE listings) confirm the issue and the impact as arbitrary code execution. The core root cause...

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

CVE-2020-28087

Summary (CVE-2020-28087): Jeecg-boot CMS version 2.3 contains a SQL injection vulnerability in the path /jeecg-boot/sys/dict/loadtreedata. The issue allows an attacker to access sensitive database information. The root cause is not explicitly detailed in the provided documents, and no remediation...

jeecg 代码问题漏洞

Jeecg-Boot is an intelligent development platform based on code generator. Jeecg-boot CMS version 2.3 of /jeecg-boot/sys/common/upload is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary code...

jeecg SQL注入漏洞

Jeecg-Boot is a code generator-based intelligent development platform. jeecg-boot CMS version 2.3 of /jeecg boot/sys/dict/loadtreedata is vulnerable to SQL injection, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Jeecg Boot of Beijing Guo Torch Information Technology Co.

Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in Jeecg Boot, which can be exploited by an attacker to obtain sensitive database information...

SQL Injection Vulnerability in Jeecg Boot of Beijing National Torch Information Technology Co. Ltd (CNVD-2021-47665)

Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in JeecgBoot of Beijing National Torch Information Technology Co. Ltd, which can be exploited by an attacker to obtain sensitive information from a database...

Jeecg-Boot suffers from SQL injection vulnerability (CNVD-2020-62597)

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Jeecg-Boot suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive...

Jeecg-Boot suffers from an arbitrary file upload vulnerability

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Jeecg-Boot has an arbitrary file upload vulnerability. An attacker can exploit the vulnerability to upload webshell...

Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59430)

JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...

Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59429)

JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...

SQL Injection Vulnerability in Jeecg-Boot v2.1.4 at Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Beijing Guo Torch Information Technology Co. Jeecg-Boot v2.1.4 suffers from a SQL injection vulnerability, which can...