Lucene search
+L

391 matches found

Kitploit
Kitploit
added 2026/09/02 2:46 p.m.3 views

CVE-2024-48307POC

Vulnerabilidad de inyección SQL en la interfaz getDictItemsByTable de jeecg-boot Parámetros: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL Introduzca la URL a detectar -f FILE, --file FILE Introduzca la dirección del archivo con una URL por línea -c CONTENT,...

9.8CVSS5.8AI score0.44349EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 1:28 p.m.3 views

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql 미인증 SQL 주입 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 주입 취약점이 발견되었습니다. Usage root@kitploit: usage: CVE-2023-1454.py -h -u URL -f FILE -t THREAD -T TIMEOUT -o OUTPUT -p PROXY optiona...

9.8CVSS6.8AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:46 a.m.5 views

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot 권한 없는 SQL 인젝션 취약점 JeecgBoot는 코드 생성기를 기반으로 한 로우코드 개발 플랫폼입니다. 기업 웹 애플리케이션을 위한 Java 로우코드 플랫폼인 jeecg-bootv3.5.0의 최신 권한 없는 SQL 인젝션 외에도, SQL 인젝션 취약점을 이용하여 데이터베이스의 정보예: 관리자 백엔드 비밀번호, 사이트 사용자 개인 정보를 획득하는 것 외에도, 공격자는 높은 권한 조건에서 서버에 트로이 목마를 업로드하여 추가로 서버 시스템 권한을 획득...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 11:23 a.m.6 views

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql 未承認SQLインジェクションのバッチスキャンpoc Jeecg-Bootは、Spring BootとJeecg-Boot-Plusをベースにした高速開発プラットフォームです。最新のjeecg-boot 3.5.0で複数のSQLインジェクション脆弱性が発見されました。 ツールの使用 python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 単一URLテスト python3 CVE-2023-1454-scan.py -f url.txt バッチ検出...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 3:36 a.m.4 views

CVE-2023-1454

CVE-2023-1454 jeecg-boot 未認可SQLインジェクション脆弱性 CVE-2023-1454...

9.8CVSS6.8AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 7:40 p.m.4 views

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql 미인증 SQL 인젝션 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 인젝션 취약점이 발견되었습니다. 설명 원본 도구 주소 원본 도구는 오탐률이 높아 판정 조건을 수정하고 겸사겸사 코드도 최적화했습니다. 도구 사용법 python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 단일 URL 테스트 python3...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/01 6:06 a.m.4 views

CVE-2023-1454

CVE-2023-1454 CVE-2023-1454 취약점 탐지 스크립트 본 문서는 참고용으로만 제공되며, 허가 없이 문서 내 기술 정보 및 도구를 사용하여 컴퓨터 시스템에 침입해서는 안 됩니다. 본 문서의 정보를 사용하여 발생하는 직접적 또는 간접적 결과 및 손해는 모두 사용자 본인에게 책임이 있습니다. 개요 Jeecg-Boot는 코드 생성기를 기반으로 한 저코드 개발 플랫폼으로, 코드 생성기, 템플릿 엔진, 권한 관리, 데이터 사전, 데이터 가져오기/내보내기 등 다양한 기능을 제공하여 개발자가 엔터프라이즈 애플리케이션을 신속...

9.8CVSS6.7AI score0.35825EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2026/05/26 8:30 p.m.14 views

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/04/06 3:15 a.m.40 views

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

7.5CVSS0.00409EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/04/02 5:04 a.m.10 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/02 5:04 a.m.12 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

9.8CVSS6.2AI score0.01531EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/01 6:36 p.m.10 views

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/01 6:36 p.m.24 views

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

9.8CVSS6.2AI score0.01531EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/01 5:16 p.m.25 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

9.8CVSS0.01531EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/01 5:16 p.m.14 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS0.00519EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/01 12:00 a.m.26 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

0.00519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.17 views

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.2AI score0.00519EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/01 12:00 a.m.12 views

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

9.8CVSS6.4AI score
SaveExploits0References4
CVE
CVE
added 2026/04/01 12:00 a.m.21 views

CVE-2024-43028

CVE-2024-43028 is a reported command-injection vulnerability in the Jeecg Boot platform, affecting the /jmreport/show component from v3.0.0 to v3.5.3. The issue allows an attacker to execute arbitrary code via a crafted HTTP request, with network access (no authentication) required. The CVSS v3.1...

9.8CVSS6.2AI score0.01531EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/01 12:00 a.m.14 views

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

6.2AI score0.01531EPSS
SaveExploits0References2
Rows per page
Query Builder