CVE-2022-48114

RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

Deserialization of untrusted data

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2022-4566

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

Sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

Ruoyi 代码问题漏洞

RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in versions of Ruoyi prior to 4.6.1, which stems from incorrect deserialization of its Shiro framework allowing an attacker to run arbitrary code via weak passwords...

PT-2022-27602 · Unknown · Y Project Ruoyi

Name of the Vulnerable Software and Affected Versions: y project RuoYi version 4.7.5 Description: A critical issue has been found in the processing of the file com/ruoyi/generator/controller/GenController, leading to sql injection. Recommendations: For y project RuoYi version 4.7.5, it is...

RuoYi SQL注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi version 4.7.5, which is caused by an incorrect operation resulting in sql injection...

CVE-2022-4566 y_project RuoYi GenController sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

CVE-2021-38241 describes a deserialization vulnerability in Ruoyi prior to 4.6.1 that allows remote code execution via a weak cipher in the Shiro framework. The issue is triggered during deserialization of untrusted data, enabling attackers to run arbitrary code on affected systems. The CVSS v3.1...

CVE-2022-4566

CVE-2022-4566 affects y_project RuoYi 4.7.5, with a vulnerability in the GenController (com/ruoyi/generator/controller/GenController) that enables SQL injection due to how inputs are handled. The patch referenced is 167970e5c4da7bb46217f576dc50622b83f32b40; applying this patch is recommended to f...

CVE-2022-4566 y_project RuoYi GenController sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

CVE-2022-4566 y_project RuoYi GenController sql injection

A vulnerability, which was classified as critical, has been found in yproject RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 167970e5c4da7bb46217f576dc50622b83f32b4...

GHSA-VP22-232W-H9X8 RuoYi-Cloud Cross-site Scripting vulnerability

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

RuoYi-Cloud Cross-site Scripting vulnerability

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2022-4348

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

Cross site scripting

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...