CVE-2024-42900

Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting XSS vulnerability via the sql parameter of the createTable function at /tool/gen/create...

PT-2024-30194

Name of the Vulnerable Software and Affected Versions Ruoyi versions 4.7.9 and earlier Description A cross-site scripting XSS issue was discovered in Ruoyi via the sql parameter of the createTable function at "/tool/gen/create". This allows for potential exploitation. Recommendations For versions...

RuoYi 安全漏洞

RuoYi is a back-end management system by the individual developer of RuoYi in China. A security vulnerability exists in RuoYi v4.7.9, which is caused by a cross-site scripting XSS vulnerability in the sql parameter of the createTable function at /tool/gen/create...

CVE-2024-42900

Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting XSS vulnerability via the sql parameter of the createTable function at /tool/gen/create...

CVE-2024-42900

Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting XSS vulnerability via the sql parameter of the createTable function at /tool/gen/create...

CVE-2024-42900

CVE-2024-42900 affects Ruoyi v4.7.9 and earlier, where a cross-site scripting (XSS) vulnerability exists via the sql parameter to the createTable() function at /tool/gen/create. The issue is documented across multiple sources (Red Hat, NVD/NVD mirrors, CVE lists) with the same description. Affect...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi version 4.7.9, which originates from a SQL injection vulnerability in the jobid parameter via /sasfs1...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-42913

CVE-2024-42913 affects RuoYi CMS v4.7.9 with a SQL injection via the job_id parameter in /sasfs1. Vulnerability details show remote network access with low attack complexity and no privileges required; resulting impact to confidentiality, integrity, and availability is high (per CVSS). No remedia...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-41599

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method...

CVE-2024-41599

This CVE concerns RuoYi (v4.7.9 and earlier). The issue is described as a Cross Site Scripting vulnerability that enables a remote attacker to execute arbitrary code via the file upload method. Concrete details from connected sources confirm affected software and the basic vulnerability pattern, ...

CVE-2024-41599

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method...

PT-2024-29455 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi versions prior to 4.7.9 Description: The issue allows a remote attacker to execute arbitrary code via the file upload method. This is a Cross Site Scripting vulnerability. Recommendations: For versions prior to 4.7.9, update to a versio...

CVE-2024-41599

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method...

CVE-2024-41599

Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method...

CVE-2024-6511

A vulnerability classified as problematic was found in yproject RuoYi up to 4.7.9. Affected by this vulnerability is the function isJsonRequest of the component Content-Type Handler. The manipulation of the argument HttpHeaders.CONTENTTYPE leads to cross site scripting. The attack can be launched...

CVE-2024-6511

CVE-2024-6511 affects y_project RuoYi up to 4.7.9. The isJsonRequest function in the Content-Type Handler is vulnerable to cross-site scripting via manipulation of HttpHeaders.CONTENT_TYPE. The vulnerability is exploitable remotely; public exploit is disclosed. Impact in the sources is described ...