Lucene search
+L

707 matches found

Cvelist
Cvelist
•added 2023/06/19 12:00 a.m.•51 views

CVE-2023-34602

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController...

8AI score0.00699EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/06/19 12:00 a.m.•17 views

PT-2023-24944 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: JeecgBoot versions up to 3.5.1 Description: The issue is a SQL injection vulnerability. It occurs via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController. Recommendations: For JeecgBoot versions up ...

7.5CVSS7.8AI score0.00699EPSS
SaveExploits1References7
CVE
CVE
•added 2023/06/19 12:00 a.m.•69 views

CVE-2023-34603

CVE-2023-34603 affects JeecgBoot up to v3.5.1, due to a SQL injection in the component queryFilterTableDictInfo within SystemApiController. The vulnerability is classified with high impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base score 7.5). Connected advisories corroborate the issue...

7.5CVSS7.7AI score0.00692EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/19 12:00 a.m.•0 views

CVE-2023-34603: Improper Neutralization of Special Elements used in an SQL Command

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController...

7.5CVSS7AI score0.00692EPSS
SaveExploits1References3
OSV
OSV
•added 2023/06/19 12:00 a.m.•18 views

CVE-2023-34603

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController...

7.5CVSS8.5AI score
SaveExploits0References3
CVE
CVE
•added 2023/06/19 12:00 a.m.•66 views

CVE-2023-34602

JeecgBoot (up to 3.5.1) contains a SQL injection in the component queryTableDictItemsByCode within SystemApiController. Impact is high (CVE-2023-34602) with potential confidentiality impact. The issue is evidenced across multiple feeds (NVD, Red Hat, GHSA, osv, etc.). No patch version is specifie...

7.5CVSS7.7AI score0.00699EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2023/06/19 12:00 a.m.•25 views

CVE-2023-34602

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController...

7.5CVSS8.5AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/06/19 12:00 a.m.•10 views

CVE-2023-34602

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController...

8.2AI score0.00699EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/06/19 12:00 a.m.•23 views

PT-2023-24945 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: JeecgBoot versions up to 3.5.1 Description: A SQL injection issue was discovered in JeecgBoot via the queryFilterTableDictInfo component at org.jeecg.modules.api.controller.SystemApiController. This allows for potential SQL injection attacks...

7.5CVSS7.9AI score0.00692EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2023/06/19 12:00 a.m.•20 views

CVE-2023-34603

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController...

8.2AI score0.00692EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/06/19 12:00 a.m.•36 views

CVE-2023-34603

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController...

8AI score0.00692EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/06/19 12:00 a.m.•12 views

JeecgBoot SQL注入漏洞

JeecgBoot is a Chinese Java low-code platform for enterprise web applications. A security vulnerability exists in JeecgBoot 3.5.1 and earlier versions, which stems from a SQL injection vulnerability in the component queryTableDictItemsByCode...

7.5CVSS7.5AI score0.00699EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/19 12:00 a.m.•4 views

CVE-2023-34602: Improper Neutralization of Special Elements used in an SQL Command

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController...

7.5CVSS7AI score0.00699EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/01/27 12:00 a.m.•52 views

JeecgBoot SQL Injection Vulnerability

JeecgBoot is a Java low-code platform for enterprise Web applications in China. A SQL injection vulnerability exists in JeecgBoot version 3.0, which stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to...

10CVSS9.8AI score0.01972EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2022/01/26 12:01 a.m.•42 views

SQL Injection in JeecgBoot

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. A patch has been released on the repository's master branch...

10CVSS2.6AI score0.01972EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2022/01/26 12:01 a.m.•31 views

GHSA-26HM-R6MG-963C SQL Injection in JeecgBoot

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. A patch has been released on the repository's master branch...

9.8CVSS9.8AI score0.01972EPSS
SaveExploits1References4
NVD
NVD
•added 2022/01/25 3:15 p.m.•34 views

CVE-2021-46089

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges...

10CVSS0.01972EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/25 3:15 p.m.•22 views

CVE-2021-46089

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges...

10CVSS7.9AI score0.01972EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/25 3:15 p.m.•34 views

CVE-2021-46089

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges...

9.8CVSS8.2AI score
SaveExploits0References1
Prion
Prion
•added 2022/01/25 3:15 p.m.•32 views

Sql injection

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges...

10CVSS9.8AI score0.01972EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder