CVE-2024-48307POC

Уязвимость SQL-инъекции в интерфейсе getDictItemsByTable в jeecg-boot Параметры: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL Введите URL для проверки -f FILE, --file FILE Введите путь к файлу с одним URL на строку -c CONTENT, --content CONTENT Введите любо...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql — poc массового сканирования неавторизованных SQL-инъекций. Jeecg-Boot — это платформа быстрой разработки на основе Spring Boot и Jeecg-Boot-Plus. В последней версии jeecg-boot 3.5.0 было обнаружено несколько уязвимостей SQL-инъекций...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot несанкционированная уязвимость SQL-инъекции JeecgBoot — это платформа низкокодовой разработки на основе генератора кода. Java-платформа низкого кода для корпоративных веб-приложений jeecg-boot v3.5.0 последняя несанкционированная SQL-инъекция. Помимо...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql — PoC массового сканирования неавторизованных SQL-инъекций Jeecg-Boot — это платформа быстрой разработки на основе Spring Boot и Jeecg-Boot-Plus. В последней версии jeecg-boot 3.5.0 было обнаружено несколько SQL-инъекций. Использование инструмента python3...

CVE-2023-1454

CVE-2023-1454 Jeecg-boot SQL-инъекция без авторизации CVE-2023-1454...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql 미인증 SQL 인젝션 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 인젝션 취약점이 발견되었습니다. 설명 원본 도구 주소 원본 도구는 오탐률이 높아 판정 조건을 수정하고 겸사겸사 코드도 최적화했습니다. 도구 사용법 python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 단일 URL 테스트 python3...

CVE-2023-1454

CVE-2023-1454 Сценарий обнаружения уязвимости CVE-2023-1454 Данный материал предоставлен только для ознакомления. Несанкционированное использование технической информации и инструментов, описанных в статье, для вторжения в любые компьютерные системы запрещено. Автор не несет ответственности за...

CVE-2026-9581

A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/comment/add. Such manipulation leads to improper access controls. The attack can be executed remotely. The exploit is publicly available and might be used. Upgrading to version...

CVE-2026-5616 JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication

A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

EUVD-2024-55519

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

PT-2026-29547

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-40489

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests...

CVE-2024-43028

CVE-2024-43028 is a reported command-injection vulnerability in the Jeecg Boot platform, affecting the /jmreport/show component from v3.0.0 to v3.5.3. The issue allows an attacker to execute arbitrary code via a crafted HTTP request, with network access (no authentication) required. The CVSS v3.1...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...