EUVD-2025-33755

JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...

CVE-2025-60269

JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...

SQL Injection

org.jeecgframework.boot, jeecg-boot-base-core is vulnerable to SQL Injection. The vulnerability is due to improper handling of SQL queries in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows an attacker to bypass SQL blacklist restrictions...