CVE-2023-7133 y_project RuoYi HTTP POST Request login cross site scripting

A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...

CVE-2023-7133

CVE-2023-7133 affects y_project RuoYi 4.7.8. The vulnerability is a cross-site scripting flaw in the HTTP POST login handler, caused by manipulating the rememberMe parameter with input like falsen3f0mp86o0. Attacker can exploit remotely; the exploit has been disclosed. Root cause centers on impro...

CVE-2023-7133 y_project RuoYi HTTP POST Request login cross site scripting

A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...

RuoYi Cross-Site Scripting Vulnerability

RuoYi is a backend management system by the individual developer of RuoYi in China. A cross-site scripting vulnerability exists in RuoYi version 4.7.8, which stems from a reflected cross-site scripting XSS vulnerability in the parameter rememberMe...

GHSA-FG29-37PX-C7WM RuoYi vulnerable to SQL injection vulnerability

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

RuoYi vulnerable to SQL injection vulnerability

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

CVE-2023-49371

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

CVE-2023-49371

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

Sql injection

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

PT-2023-31185 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi versions up to v4.6 Description: The issue is a SQL injection vulnerability. It can be exploited via the "/system/dept/edit" API endpoint. Recommendations: For versions up to v4.6, as a temporary workaround, consider restricting access ...

CVE-2023-49371

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

CVE-2023-49371

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

RuoYi Security Breach

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v4.6 and earlier versions, which originates from a SQL injection vulnerability in /system/dept/edit...

CVE-2023-49371

CVE-2023-49371 affects Ruoyi (up to v4.6) with a SQL injection in the /system/dept/edit endpoint. The vulnerability is high severity (CVSS 3.1: 9.8, NETWORK, no user interaction). Returns no explicit patch in the provided documents; a PTSecurity advisory notes the issue and suggests restricting a...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

Information disclosure

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

RuoYi Security Breach

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. lerry903 A security vulnerability exists in RuoYi version 3.4.0, which originates from allowing an attacker to perform elevation of privilege via the getRememberedSerializedIdentity function...

PT-2023-12126 · Lerry903 · Ruoyi

Name of the Vulnerable Software and Affected Versions: lerry903 RuoYi version 3.4.0 Description: An issue was discovered in the getRememberedSerializedIdentity function in the CookieRememberMeManager class, allowing remote attackers to escalate privileges. Recommendations: For version 3.4.0,...