5 matches found
CVE-2023-34601
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...
Sql injection
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...
CVE-2023-34601
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...
Jeesite SQL注入漏洞
Zhuo source software Jeesite is China's Zhuo source software company of a set of open source Java EE enterprise-class rapid development platform . The platform includes system permissions components, data permissions components, data dictionary components, core tools components, view manipulation...
CVE-2023-34601
Summary of CVE-2023-34601 (JeeSite) : Jeesite before commit 10742d3 contains a SQL injection vulnerability via the component ${businessTable} in act/ActDao.xml. The root cause is unsanitized input that leads to SQL injection when building queries that use the ${businessTable} placeholder. The vul...