764 matches found
CVE-2023-52048
RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...
CVE-2023-7133
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
Cross site scripting
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
CVE-2023-7133
CVE-2023-7133 affects y_project RuoYi 4.7.8. The vulnerability is a cross-site scripting flaw in the HTTP POST login handler, caused by manipulating the rememberMe parameter with input like falsen3f0mp86o0. Attacker can exploit remotely; the exploit has been disclosed. Root cause centers on impro...
CVE-2023-7133 y_project RuoYi HTTP POST Request login cross site scripting
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
CVE-2023-7133 y_project RuoYi HTTP POST Request login cross site scripting
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
RuoYi Cross-Site Scripting Vulnerability
RuoYi is a backend management system by the individual developer of RuoYi in China. A cross-site scripting vulnerability exists in RuoYi version 4.7.8, which stems from a reflected cross-site scripting XSS vulnerability in the parameter rememberMe...
GHSA-FG29-37PX-C7WM RuoYi vulnerable to SQL injection vulnerability
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
RuoYi vulnerable to SQL injection vulnerability
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
Sql injection
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
RuoYi Security Breach
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v4.6 and earlier versions, which originates from a SQL injection vulnerability in /system/dept/edit...
CVE-2023-49371
CVE-2023-49371 affects Ruoyi (up to v4.6) with a SQL injection in the /system/dept/edit endpoint. The vulnerability is high severity (CVSS 3.1: 9.8, NETWORK, no user interaction). Returns no explicit patch in the provided documents; a PTSecurity advisory notes the issue and suggests restricting a...
PT-2023-31185 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi versions up to v4.6 Description: The issue is a SQL injection vulnerability. It can be exploited via the "/system/dept/edit" API endpoint. Recommendations: For versions up to v4.6, as a temporary workaround, consider restricting access ...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2021-28411
An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...