29 matches found
CVE-2024-42900
Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting XSS vulnerability via the sql parameter of the createTable function at /tool/gen/create...
CVE-2022-48114
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...
Sql injection
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...
RuoYi SQL注入漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi versions prior to v4.7.5, which stems from a problem with the component /tool/gen/createTable, resulting in SQL injection...
CVE-2022-48114
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...
CVE-2022-48114
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...
CVE-2022-48114: Improper Neutralization of Special Elements used in an SQL Command
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable...
PT-2023-15576
Name of the Vulnerable Software and Affected Versions RuoYi versions up to 4.7.5 Description The issue is related to a SQL injection vulnerability. It affects the component /tool/gen/createTable. Recommendations For versions up to 4.7.5, as a temporary workaround, consider restricting access to t...