Lucene search
K

8 matches found

OSV
OSV
added 2023/08/17 9:30 p.m.15 views

GHSA-9V66-9239-CQV2 Jeecg-boot SQL Injection vulnerability

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS5.6AI score0.00069EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/08/17 9:30 p.m.28 views

Jeecg-boot SQL Injection vulnerability

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS7.6AI score0.00069EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/08/17 7:15 p.m.13 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS7.8AI score
Exploits0References2
NVD
NVD
added 2023/08/17 7:15 p.m.6 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

5.5CVSS5.8AI score0.00069EPSS
Exploits1References2
Prion
Prion
added 2023/08/17 7:15 p.m.76 views

Sql injection

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

1.7CVSS5.7AI score0.00069EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/08/17 12:0 a.m.16 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

6AI score0.00069EPSS
Exploits1References2
CVE
CVE
added 2023/08/17 12:0 a.m.39 views

CVE-2023-38905

CVE-2023-38905 affects Jeecg-boot v3.5.0 and earlier. The issue is an SQL injection vulnerability that a local attacker can exploit to cause a denial of service, by injecting through functions such as Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, and DBMS_PIPE.RECEIVE_MESSAGE. The availa...

5.5CVSS5.7AI score0.00069EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/17 12:0 a.m.9 views

CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PGSleep, DBMSLock.Sleep, Waitfor, DECODE, and DBMSPIPE.RECEIVEMESSAGE functions...

7.8AI score0.00069EPSS
Exploits1References2
Rows per page
Query Builder