Deserialization of untrusted data

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2022-4566

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

Sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

Ruoyi 代码问题漏洞

RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in versions of Ruoyi prior to 4.6.1, which stems from incorrect deserialization of its Shiro framework allowing an attacker to run arbitrary code via weak passwords...

CVE-2022-4566

CVE-2022-4566 affects y_project RuoYi 4.7.5, with a vulnerability in the GenController (com/ruoyi/generator/controller/GenController) that enables SQL injection due to how inputs are handled. The patch referenced is 167970e5c4da7bb46217f576dc50622b83f32b40; applying this patch is recommended to f...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

PT-2022-27602 · Unknown · Y Project Ruoyi

Name of the Vulnerable Software and Affected Versions: y project RuoYi version 4.7.5 Description: A critical issue has been found in the processing of the file com/ruoyi/generator/controller/GenController, leading to sql injection. Recommendations: For y project RuoYi version 4.7.5, it is...

CVE-2022-4566 y_project RuoYi GenController sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

CVE-2022-4566 y_project RuoYi GenController sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

CVE-2021-38241 describes a deserialization vulnerability in Ruoyi prior to 4.6.1 that allows remote code execution via a weak cipher in the Shiro framework. The issue is triggered during deserialization of untrusted data, enabling attackers to run arbitrary code on affected systems. The CVSS v3.1...

CVE-2022-4566 y_project RuoYi GenController sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

RuoYi SQL注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi version 4.7.5, which is caused by an incorrect operation resulting in sql injection...

RuoYi-Cloud Cross-site Scripting vulnerability

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

GHSA-VP22-232W-H9X8 RuoYi-Cloud Cross-site Scripting vulnerability

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2022-4348

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

Cross site scripting

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

PT-2022-26934 · Y · Ruoyi-Cloud

Name of the Vulnerable Software and Affected Versions: y project RuoYi-Cloud affected versions not specified Description: A vulnerability was found in the JSON Handler component of y project RuoYi-Cloud, which can be exploited to lead to cross site scripting. The attack may be launched remotely...

CVE-2022-4348 y_project RuoYi-Cloud JSON cross site scripting

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

RuoYi 安全漏洞

RuoYi is a backend management system by the individual developer RuoYi in China. A security vulnerability exists in RuoYi, which stems from some unknown functions in its JSON Handler component that allow an attacker to implement cross-site scripting. The attack method has been made public and can...