474 matches found
CVE-2020-28087: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...
jeecg SQL injection vulnerability
Jeecg-Boot is a code generator-based intelligent development platform. jeecg-boot CMS version 2.3 of /jeecg boot/sys/dict/loadtreedata is vulnerable to SQL injection, which can be exploited by attackers to access sensitive database information...
jeecg code issues and vulnerabilities
Jeecg-Boot is an intelligent development platform based on code generator. Jeecg-boot CMS version 2.3 of /jeecg-boot/sys/common/upload is vulnerable to arbitrary file upload, which can be exploited by attackers to execute arbitrary code...
SQL Injection Vulnerability in Jeecg Boot of Beijing Guo Torch Information Technology Co.
Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in Jeecg Boot, which can be exploited by an attacker to obtain sensitive database information...
SQL Injection Vulnerability in Jeecg Boot of Beijing National Torch Information Technology Co. Ltd (CNVD-2021-47665)
Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in JeecgBoot of Beijing National Torch Information Technology Co. Ltd, which can be exploited by an attacker to obtain sensitive information from a database...
Jeecg-Boot suffers from an arbitrary file upload vulnerability
Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Jeecg-Boot has an arbitrary file upload vulnerability. An attacker can exploit the vulnerability to upload webshell...
Jeecg-Boot suffers from SQL injection vulnerability (CNVD-2020-62597)
Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Jeecg-Boot suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive...
Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59430)
JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...
Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59429)
JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...
SQL Injection Vulnerability in Jeecg-Boot v2.1.4 at Beijing Guo Torch Information Technology Co.
Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Beijing Guo Torch Information Technology Co. Jeecg-Boot v2.1.4 suffers from a SQL injection vulnerability, which can...
SQL Injection Vulnerability in Jeecg-Boot of Beijing Guo Torch Information Technology Co.
Jeecg-Boot is a rapid development platform based on a code generator. Jeecg-Boot has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from a database...
Jeecg-Boot suffers from a flawed logic vulnerability
Jeecg-Boot is a rapid development platform based on a code generator. Jeecg-Boot suffers from a logic flaw vulnerability. An attacker can use the vulnerability to modify the password of any user including administrator admin to gain access to the web server administration...
Unauthorized Access Vulnerability in Jeecg-Boot
JJeecg-Boot is a rapid development platform based on a code generator. Jeecg-Boot suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive system information...
Logic Flaw Vulnerability in JEECG-BOOT System of Beijing Guo Torch Information Technology Co.
Jeecg-Boot is a code generator based rapid development platform that can be used to develop backend management systems such as ERP, CRM and applets. A logic flaw exists in the JEECG-BOOT system of Beijing Guo Torch Information Technology Co., Ltd, which can be exploited by an attacker to modify t...