315 matches found
CVE-2022-0627
The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2022-0627
The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2022-0627: Improper Neutralization of Input During Web Page Generation
The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2022-26169
Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the refcode parameter...
GHSA-VH2R-X97C-2VPR SQL Injection in Jeecg-boot
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
Sql injection
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22880
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
CVE-2022-22880
Jeecg-boot v3.0 is affected by an SQL injection in the code path /jeecg-boot/sys/user/queryUserByDepId, exploitable via the code parameter (also cited via queryUserByDepId with id/realname in some reports). The vulnerability stems from improper handling of user-supplied input in that function, en...
CVE-2022-22881
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...
PT-2022-15714
Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.0 Description A SQL injection issue was found in Jeecg-boot via the code parameter in the "/jeecg-boot/sys/user/queryUserByDepId" API endpoint. Recommendations For Jeecg-boot version 3.0, consider restricting access to the...
Jeecg-Boot SQL注入漏洞
Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...
CVE-2022-22880: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...
PT-2022-15715
Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.0 Description A SQL injection issue was found in Jeecg-boot via the code parameter in the "/sys/user/queryUserComponentData" API endpoint. Recommendations For Jeecg-boot version 3.0, as a temporary workaround, consider...
CVE-2022-22881: Improper Neutralization of Special Elements used in an SQL Command
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData...