Sql injection

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

Jeesite SQL注入漏洞

Zhuo source software Jeesite is China's Zhuo source software company of a set of open source Java EE enterprise-class rapid development platform . The platform includes system permissions components, data permissions components, data dictionary components, core tools components, view manipulation...

CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

CVE-2023-34601

Summary of CVE-2023-34601 (JeeSite) : Jeesite before commit 10742d3 contains a SQL injection vulnerability via the component ${businessTable} in act/ActDao.xml. The root cause is unsanitized input that leads to SQL injection when building queries that use the ${businessTable} placeholder. The vul...

CVE-2020-19229

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter...

CVE-2020-19229

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter...

Deserialization of untrusted data

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter...

CVE-2020-19229

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter...

CVE-2020-19229

CVE-2020-19229 affects Jeesite 1.2.7 which bundles Apache Shiro 1.2.3. The issue arises from a Java deserialization vulnerability via the rememberMe parameter when a cipher key is not configured, enabling remote code execution. Public details indicate the root cause is CVE-2016-4437 (Apache Shiro...

卓源软件 Jeesite 代码问题漏洞

Zhuo source software Jeesite is China's Zhuo source software company of a set of open source Java EE enterprise-class rapid development platform . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view...

CVE-2020-19229

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter. Recent assessments: Assessed Attacker Value: 0...

JeeSite of Jinan Zhuoyuan Software Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-57094)

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. JeeSite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability. Attackers can use this vulnerability to obtain sensitive information i...

Jeesite has an XSS vulnerability

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jeesite has an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

Jeesite suffers from an XML entity injection vulnerability

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jeesite has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co. Ltd (CNVD-2020-41723)

JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co. Ltd (CNVD-2020-41724)

JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co. Ltd (CNVD-2020-41721)

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jinan Zhuoyuan Software Co., Ltd. Jeesite SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co. Ltd (CNVD-2020-41722)

JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co.

JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...