61 matches found
CVE-2025-0700
CVE-2025-0700 affects JoeyBling bootplus. The vulnerability is in the file /admin/sys/log/list where manipulating the logId argument leads to a SQL injection. It can be exploited remotely. Multiple connected sources describe a rolling-release project with no disclosed version details for affected...
CVE-2025-0700 JoeyBling bootplus list sql injection
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/sys/log/list. The manipulation of the argument logId leads to sql injection. The attack may be...
CVE-2025-0698
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the...
CVE-2025-0699 JoeyBling bootplus list sql injection
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/sys/role/list. The manipulation of the argument sort leads to sql injection. The attack c...
CVE-2025-0699 JoeyBling bootplus list sql injection
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/sys/role/list. The manipulation of the argument sort leads to sql injection. The attack c...
CVE-2025-0698 JoeyBling bootplus list sql injection
A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified as critical. Affected is an unknown function of the file /admin/sys/menu/list. The manipulation of the argument sort/order leads to sql injection. It is possible to launch the...
bootplus 注入漏洞
bootplus is a permission management framework by JoeyBling Personal Developer. An injection vulnerability exists in bootplus, which stems from the parameter sort in the file /admin/sys/user/list that causes SQL injection...
PT-2025-4015 · Joeybling · Bootplus
Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A vulnerability was found in JoeyBling bootplus, affecting some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site...
PT-2025-4013 · Joeybling · Bootplus
Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A problematic issue was found in the qrCode function of the QrCodeController.java file. The manipulation of the w/h argument leads to resource consumption. This...
bootplus 路径遍历漏洞
bootplus is a privilege management framework by JoeyBling Personal Developer. A path traversal vulnerability exists in bootplus, which stems from the parameter name in the file src/main/java/io/github/controller/SysFileController.java that causes path traversal...
bootplus 注入漏洞
bootplus is a permission management framework by JoeyBling Personal Developer. An injection vulnerability exists in bootplus, which stems from the parameter sort in the file /admin/sys/role/list that causes SQL injection...
bootplus 注入漏洞
bootplus is a permission management framework by JoeyBling Personal Developer. An injection vulnerability exists in bootplus, which stems from the parameter sort/order in the file /admin/sys/menu/list that causes SQL injection...
bootplus 安全漏洞
bootplus is a permission management framework by JoeyBling Personal Developer. A security vulnerability exists in bootplus, which stems from the parameter logId in the file /admin/sys/log/list that can lead to SQL injection...
PT-2025-4012 · Joeybling · Bootplus
Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A problematic issue has been found in JoeyBling bootplus, affecting the processing of the file src/main/java/io/github/controller/SysFileController.java. The...
PT-2025-4008 · Joeybling · Bootplus
Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A critical vulnerability has been found in JoeyBling bootplus. The issue affects an unknown functionality of the file /admin/sys/role/list. The manipulation of the...
bootplus 代码问题漏洞
bootplus is a permission management framework by JoeyBling Personal Developer. A code issue vulnerability exists in bootplus, which stems from the parameter PortraitFile in the file src/main/java/io/github/controller/SysFileController.java that can lead to unrestricted uploads...
PT-2025-4007 · Joeybling · Bootplus
Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus versions up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A critical issue has been found, allowing for remote SQL injection. The manipulation of the sort/order argument in an unknown function of the file...
PT-2025-4011 · Unknown · Joeybling Bootplus
Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A critical vulnerability was found in JoeyBling bootplus, allowing for unrestricted file upload. The issue is related to the manipulation of the portraitFile...
bootplus 代码注入漏洞
bootplus is a privilege management framework by JoeyBling Personal Developer. A code injection vulnerability exists in bootplus, which originates from the file /admin/sys/admin.html that can lead to cross-site scripting...
bootplus 输入验证错误漏洞
bootplus is a rights management framework by JoeyBling Personal Developer. An input validation error vulnerability exists in bootplus, which stems from the parameter text in the file src/main/java/io/github/controller/QrCodeController.java causing an open redirect...