Lucene search
+L

391 matches found

Kitploit
Kitploit
added 2026/09/02 3:36 a.m.4 views

CVE-2023-1454

CVE-2023-1454 jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454...

9.8CVSS6.8AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 7:40 p.m.4 views

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL Injection Batch Scan POC Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Description Original tool URL The original tool h...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/01 1:33 p.m.6 views

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL injection batch scanning poc Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Tool Usage python3 CVE-2023-1454-scan.py -u...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 1:03 p.m.3 views

CVE-2024-48307POC

jeecg-boot getDictItemsByTable interface exists SQL injection vulnerability Parameters: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL Please enter the URL to be detected -f FILE, --file FILE Please enter the file path containing one URL per line -c CONTENT,...

9.8CVSS5.9AI score0.44349EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 12:28 p.m.3 views

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql Unauthorized SQL Injection Batch Scan PoC. Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest version jeecg-boot 3.5.0 has been exposed with multiple SQL injection vulnerabilities. Usage...

9.8CVSS6.8AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 6:06 a.m.4 views

CVE-2023-1454

CVE-2023-1454 CVE-2023-1454 Vulnerability Detection Script This article is for reference only. Do not use the technical materials and tools in this article to intrude into any computer system without authorization. The direct or indirect consequences and losses caused by the information provided ...

9.8CVSS6.9AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/28 2:11 p.m.5 views

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot Vulnerabilità di SQL injection non autorizzata JeecgBoot è una piattaforma di sviluppo low-code basata su un generatore di codice. Utilizzata per applicazioni Web aziendali, la piattaforma Java low-code jeecg-bootv3.5.0 presenta la più recente SQL...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2026/05/26 8:30 p.m.14 views

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/04/06 3:15 a.m.38 views

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

7.5CVSS0.00409EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/04/02 5:04 a.m.10 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/02 5:04 a.m.12 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

9.8CVSS6.2AI score0.01531EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/01 6:36 p.m.10 views

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/01 6:36 p.m.24 views

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

9.8CVSS6.2AI score0.01531EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/01 5:16 p.m.13 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS0.00519EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/01 5:16 p.m.25 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

9.8CVSS0.01531EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/01 12:00 a.m.25 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

0.00519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.16 views

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/01 12:00 a.m.12 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/01 12:00 a.m.31 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

0.01531EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/01 12:00 a.m.21 views

CVE-2024-43028

CVE-2024-43028 is a reported command-injection vulnerability in the Jeecg Boot platform, affecting the /jmreport/show component from v3.0.0 to v3.5.3. The issue allows an attacker to execute arbitrary code via a crafted HTTP request, with network access (no authentication) required. The CVSS v3.1...

9.8CVSS6.2AI score0.01531EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder