SQL Injection

org.jeecgframework.boot, jeecg-boot-base-core is vulnerable to SQL Injection. The vulnerability is due to improper handling of SQL queries in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows an attacker to bypass SQL blacklist restrictions...