CVE-2024-48307POC

Vulnerabilidad de inyección SQL en la interfaz getDictItemsByTable de jeecg-boot Parámetros: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL Introduzca la URL a detectar -f FILE, --file FILE Introduzca la dirección del archivo con una URL por línea -c CONTENT,...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql 미인증 SQL 주입 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 주입 취약점이 발견되었습니다. Usage root@kitploit: usage: CVE-2023-1454.py -h -u URL -f FILE -t THREAD -T TIMEOUT -o OUTPUT -p PROXY optiona...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot 권한 없는 SQL 인젝션 취약점 JeecgBoot는 코드 생성기를 기반으로 한 로우코드 개발 플랫폼입니다. 기업 웹 애플리케이션을 위한 Java 로우코드 플랫폼인 jeecg-bootv3.5.0의 최신 권한 없는 SQL 인젝션 외에도, SQL 인젝션 취약점을 이용하여 데이터베이스의 정보예: 관리자 백엔드 비밀번호, 사이트 사용자 개인 정보를 획득하는 것 외에도, 공격자는 높은 권한 조건에서 서버에 트로이 목마를 업로드하여 추가로 서버 시스템 권한을 획득...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql 未承認SQLインジェクションのバッチスキャンpoc Jeecg-Bootは、Spring BootとJeecg-Boot-Plusをベースにした高速開発プラットフォームです。最新のjeecg-boot 3.5.0で複数のSQLインジェクション脆弱性が発見されました。 ツールの使用 python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 単一URLテスト python3 CVE-2023-1454-scan.py -f url.txt バッチ検出...

CVE-2023-1454

CVE-2023-1454 jeecg-boot 未認可SQLインジェクション脆弱性 CVE-2023-1454...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql 미인증 SQL 인젝션 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 인젝션 취약점이 발견되었습니다. 설명 원본 도구 주소 원본 도구는 오탐률이 높아 판정 조건을 수정하고 겸사겸사 코드도 최적화했습니다. 도구 사용법 python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 단일 URL 테스트 python3...

CVE-2023-1454

CVE-2023-1454 CVE-2023-1454 취약점 탐지 스크립트 본 문서는 참고용으로만 제공되며, 허가 없이 문서 내 기술 정보 및 도구를 사용하여 컴퓨터 시스템에 침입해서는 안 됩니다. 본 문서의 정보를 사용하여 발생하는 직접적 또는 간접적 결과 및 손해는 모두 사용자 본인에게 책임이 있습니다. 개요 Jeecg-Boot는 코드 생성기를 기반으로 한 저코드 개발 플랫폼으로, 코드 생성기, 템플릿 엔진, 권한 관리, 데이터 사전, 데이터 가져오기/내보내기 등 다양한 기능을 제공하여 개발자가 엔터프라이즈 애플리케이션을 신속...

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

CVE-2024-43028 is a reported command-injection vulnerability in the Jeecg Boot platform, affecting the /jmreport/show component from v3.0.0 to v3.5.3. The issue allows an attacker to execute arbitrary code via a crafted HTTP request, with network access (no authentication) required. The CVSS v3.1...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...